Privilege Authority Community Forum

I am currently using the free version of Privilege authority to try it out to see if it works with some of our applications before we purchase it. I am having one problem with an application that needs the user to be set as local admin in order for it to run. I have a policy set with PA and linked to the OU my test computer is in. I have it set to the local path of the application and have designated my domain admin acct as the authorized account to run the app. However, when I run the app it will not work. If I look in event viewer, it is telling me that the user needs to have full control to a certain registry key in order for the program to load/run. Can PA do this? I have it checked for all child processes to use the admin account as well....i though that would pertain to any registry access that was needed....any ideas?

I question now if my rules are even being tied to the test GPO I created. If I look at the GPO and select to look at the settings, it is showing nothing is defined. Wouldnt I see something being defined? Its almost as if the rule is created, but its blank. Am I seeing that right?

I ask if the rules are even being run because I modified one of the rules to the simple "allow to change date and time if launched from the taskbar (XP)" and the user still cannot do that on the computer I have in that OU. I do have the PA client installed on the computer as well and have verified that the service is in fact running.

<img src="http://privilegeforum.scriptlogic.com/Portals/7/activeforums_Attach/Capture.JPG" border="0" />

Cant get my screenshot to display

The Privilege Authority rule settings will not be displayed by GPMC because GPMC can not read the rules that PA places inside of a GPO.

Here is a blog article on some tips to troubleshoot rule elevation on a client and also to help you be able to verify if your rules are actually being copied to the client.

http://privilegeforum.scriptlogic.c...ation.aspx