Adminstrator security

Ok..I am new to RMS, so don't laugh..to hard. I've gotten everything working, and I have no problems, yippee!! Thing is, Administrator seems to be open. I can open the program, click on configuration and make some pretty drastic changes. Should this be locked down or is there something that I am missing here?

Nathan

Reply to
Nathan
Loading thread data ...

Reply to
rick

Rick, Well, if I open administrator I can open the configuration screen before I connect to the database. I know I can change items too, because up until recently I didn't even know the password to the SQL database. Right now I setup an account for POS only and locked it down so that you can't do anything but POS. I don't like doing this, but it seems the only way for now.

Nathan

"rick" wrote:

Reply to
Nathan

Nathan,

Unsure how you were able to amend items from within Administrator without logging in, but yes register specific details can be changed from the configuration screen before entering any passwords. There is a registry tweak to restrict applications being run on the till without locking the entire user down in windows.

Before going any further please note this will only work for Win2k, ME and XP. Also the restriction is for the current user that is logged in when you make the changes, if your are using multiple logins for windows you will need to ensure this is carried out for each user. As usual, ensure you backup your registry before making any changes.

- Run regedit (Start > Run > Regedit)

- Find the key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

- In here add a new DWORD called "DisallowRun" and set the value to "1".

- Create a new sub-key under the Explorer key called "DisallowRun"

- Within the sub-key create a new String Value named "1" and set the value to "SOADMIN.EXE".

Close regedit and reboot the pc, the application should now be restricted for that user.

This can also be usefull if you only wanted to allow SO Manager to be run on the back-office PC. In this case you would name the second String Value "2" with the value "SOMANAGER.EXE" for each user/pc.

If you want to remove the restrictions either remove the String Values from the DisallowRun key, or set the DisallowRun DWORD value to "0"

Hope this helps!

Reply to
Jeremy Janisch

BeanSmart website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.