Installation & Licensing

[#1]

We tried to install AutoCAD Architectural desktop2 on a Windows 2000 server.
When we log in to the server with a user (with user rights) we get this
error messages when trying to execute AutoCAD Architectural desktop2:

"Failed to update the system registry. please try using regedit".

I found this article at the KB of AutoDesk concerning this error:

ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
2000"

Our problem is that the article above refers to a DOMAIN and instructs to do
changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server which
is not attached to any DOMAIN - that is why we can't follow the solution
supplied from AUTODESK.
I also tried to move the autocad user to power users group and it worked,
but the power users group has wide permissions on the server which I can't
alow. the user must stay a regular user.

I hope someone will be for assistant.

Miky Heiman

[#2]

Hi Miky,

To run on Windows 2000 you need Power User rights. BTW, these are the same as
user rights on NT 4x. Microsoft has changed rights on Windows 2000. If you go
to the Network help on Windows 2000 you will find information from Microsoft on
the changes.

The problem is user locks down the registry and AutoCAD needs to be able to
write to the registry.

Hope this helps.

Bud

Miky Heiman wrote:

> We tried to install AutoCAD Architectural desktop2 on a Windows 2000 server.
> When we log in to the server with a user (with user rights) we get this
> error messages when trying to execute AutoCAD Architectural desktop2:
>
> "Failed to update the system registry. please try using regedit".
>
> I found this article at the KB of AutoDesk concerning this error:
>
> ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
> 2000"
>
> Our problem is that the article above refers to a DOMAIN and instructs to do
> changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server which
> is not attached to any DOMAIN - that is why we can't follow the solution
> supplied from AUTODESK.
> I also tried to move the autocad user to power users group and it worked,
> but the power users group has wide permissions on the server which I can't
> alow. the user must stay a regular user.
>
> I hope someone will be for assistant.
>
> Miky Heiman

[#3]

hi bud and thanks,

The power Users in windows 2000 has a little bit more permissions than users
in NT 4:
they can change system time, create local users and groups, create and
delete non-admin file shares, create, manage and delete and share local
printers and more. for us it is crucial and we can't alow that. is there any
change in the regestry that I can do? why it is possible to change this in
the Domain Controler and not in the Stand Alone?

Miky
"Bud Schroeder" wrote in message
news:3A5AC480.76C71A5C@sonic.net...
> Hi Miky,
>
> To run on Windows 2000 you need Power User rights. BTW, these are the
same as
> user rights on NT 4x. Microsoft has changed rights on Windows 2000. If
you go
> to the Network help on Windows 2000 you will find information from
Microsoft on
> the changes.
>
> The problem is user locks down the registry and AutoCAD needs to be able
to
> write to the registry.
>
> Hope this helps.
>
> Bud
>
> Miky Heiman wrote:
>
> > We tried to install AutoCAD Architectural desktop2 on a Windows 2000
server.
> > When we log in to the server with a user (with user rights) we get this
> > error messages when trying to execute AutoCAD Architectural desktop2:
> >
> > "Failed to update the system registry. please try using regedit".
> >
> > I found this article at the KB of AutoDesk concerning this error:
> >
> > ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
> > 2000"
> >
> > Our problem is that the article above refers to a DOMAIN and instructs
to do
> > changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server
which
> > is not attached to any DOMAIN - that is why we can't follow the solution
> > supplied from AUTODESK.
> > I also tried to move the autocad user to power users group and it
worked,
> > but the power users group has wide permissions on the server which I
can't
> > alow. the user must stay a regular user.
> >
> > I hope someone will be for assistant.
> >
> > Miky Heiman
>

[#4]

Have you tried creating a group with just enough rights for autocad users,
but no rights in the areas you don't want them?
John

"Miky Heiman" wrote in message
news:CA80D83CEC2206BCF4BD7D369F3B5C68@in.WebX.SaUCah8kaAW...
> We tried to install AutoCAD Architectural desktop2 on a Windows 2000
server.
> When we log in to the server with a user (with user rights) we get this
> error messages when trying to execute AutoCAD Architectural desktop2:
>
> "Failed to update the system registry. please try using regedit".
>
> I found this article at the KB of AutoDesk concerning this error:
>
> ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
> 2000"
>
> Our problem is that the article above refers to a DOMAIN and instructs to
do
> changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server
which
> is not attached to any DOMAIN - that is why we can't follow the solution
> supplied from AUTODESK.
> I also tried to move the autocad user to power users group and it worked,
> but the power users group has wide permissions on the server which I can't
> alow. the user must stay a regular user.
>
> I hope someone will be for assistant.
>
> Miky Heiman
>

[#5]

I am trying to find out where in the Windows 2000 I can grant permission to
the Users group to have full access to the: HKEY_Current_USER Hive in the
regestry, I think that when Iw will grant full control to that Hive the
problem will be solved.

"John Bleakley [Autodesk Support]" wrote
in message news:0701D4B0D12EBF58946BF2292CF2AA8D@in.WebX.SaUCah8kaAW...
> Have you tried creating a group with just enough rights for autocad users,
> but no rights in the areas you don't want them?
> John
>
> "Miky Heiman" wrote in message
> news:CA80D83CEC2206BCF4BD7D369F3B5C68@in.WebX.SaUCah8kaAW...
> > We tried to install AutoCAD Architectural desktop2 on a Windows 2000
> server.
> > When we log in to the server with a user (with user rights) we get this
> > error messages when trying to execute AutoCAD Architectural desktop2:
> >
> > "Failed to update the system registry. please try using regedit".
> >
> > I found this article at the KB of AutoDesk concerning this error:
> >
> > ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
> > 2000"
> >
> > Our problem is that the article above refers to a DOMAIN and instructs
to
> do
> > changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server
> which
> > is not attached to any DOMAIN - that is why we can't follow the solution
> > supplied from AUTODESK.
> > I also tried to move the autocad user to power users group and it
worked,
> > but the power users group has wide permissions on the server which I
can't
> > alow. the user must stay a regular user.
> >
> > I hope someone will be for assistant.
> >
> > Miky Heiman
> >
>

[#6]

Don't grant full control because then the user could change permissions.
Just grant them CHANGE permissions. Also, I do believe that AutoCAD also
wants to write to several keys in HKEY_LOCAL_MACHINE as well.

--
Kevin Nehls
remove -ns- for direct reply

"Miky Heiman" wrote in message
news:BBF6839FA31480EB8765E5D7B6560089@in.WebX.SaUCah8kaAW...
> I am trying to find out where in the Windows 2000 I can grant permission
to
> the Users group to have full access to the: HKEY_Current_USER Hive in
the
> regestry, I think that when Iw will grant full control to that Hive the
> problem will be solved.
>

[#7]

You can probably control most (if not all) of these issues with the use of
system policies. And to answer your question about Windows 2000 domain
controllers, this has to do with Microsoft's Active Directory Services. The
KB article describes how to do this from Win2K DCs because you can make the
registry and file permission changes necessary from the use of group
policies. If you don't have Win2K DCs then you can read this article and
see what you need to change:

1) Set NTFS permissions on the AutoCAD install directory (program
files\AutoCAD 2000 by default) so that the user has CHANGE permissions

2) Set the HKEY_LOCAL_MACHINE\Software\Autodesk key so that the user also
has CHANGE permissions here.

I believe that the article tells you to set the permissions to FULL, but
this will also give the user the ability to change permissions. If you give
them CHANGE permissions then the user will have all rights except for the
ability to change permissions.

Also, if you don't have a Win2K DC, then you will have to walk around to
everyone's PC and make these changes, over and over. Before doing this I
would trying seeing what you can and can't do via system policies.

HTH
--
Kevin Nehls
remove -ns- for direct reply

[#8]

Hi Mikey,

In my stock out of the Box NT 4.0 you can do all of that as well. But what your
really after is not to upgrade User, but maybe downgrade Power User. Take a
look at system policy for Server or Workstation. You can adjust it on each of
the examples you are showing here.

Hope this helps.

Bud

Miky Heiman wrote:

> hi bud and thanks,
>
> The power Users in windows 2000 has a little bit more permissions than users
> in NT 4:
> they can change system time, create local users and groups, create and
> delete non-admin file shares, create, manage and delete and share local
> printers and more. for us it is crucial and we can't alow that. is there any
> change in the regestry that I can do? why it is possible to change this in
> the Domain Controler and not in the Stand Alone?
>
> Miky
> "Bud Schroeder" wrote in message
> news:3A5AC480.76C71A5C@sonic.net...
> > Hi Miky,
> >
> > To run on Windows 2000 you need Power User rights. BTW, these are the
> same as
> > user rights on NT 4x. Microsoft has changed rights on Windows 2000. If
> you go
> > to the Network help on Windows 2000 you will find information from
> Microsoft on
> > the changes.
> >
> > The problem is user locks down the registry and AutoCAD needs to be able
> to
> > write to the registry.
> >
> > Hope this helps.
> >
> > Bud
> >
> > Miky Heiman wrote:
> >
> > > We tried to install AutoCAD Architectural desktop2 on a Windows 2000
> server.
> > > When we log in to the server with a user (with user rights) we get this
> > > error messages when trying to execute AutoCAD Architectural desktop2:
> > >
> > > "Failed to update the system registry. please try using regedit".
> > >
> > > I found this article at the KB of AutoDesk concerning this error:
> > >
> > > ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
> > > 2000"
> > >
> > > Our problem is that the article above refers to a DOMAIN and instructs
> to do
> > > changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server
> which
> > > is not attached to any DOMAIN - that is why we can't follow the solution
> > > supplied from AUTODESK.
> > > I also tried to move the autocad user to power users group and it
> worked,
> > > but the power users group has wide permissions on the server which I
> can't
> > > alow. the user must stay a regular user.
> > >
> > > I hope someone will be for assistant.
> > >
> > > Miky Heiman
> >

[#9]

Yes, I tryed to give Full control to the HKEY_LOCAL_MACHINE key in the
regestry and full control to \winnt + subdirectories - but still - the
error message keeps jumping! If only I could find the exact keys that the
Autocad uses!
Miky

"John Bleakley [Autodesk Support]" wrote
in message news:0701D4B0D12EBF58946BF2292CF2AA8D@in.WebX.SaUCah8kaAW...
> Have you tried creating a group with just enough rights for autocad users,
> but no rights in the areas you don't want them?
> John
>
> "Miky Heiman" wrote in message
> news:CA80D83CEC2206BCF4BD7D369F3B5C68@in.WebX.SaUCah8kaAW...
> > We tried to install AutoCAD Architectural desktop2 on a Windows 2000
> server.
> > When we log in to the server with a user (with user rights) we get this
> > error messages when trying to execute AutoCAD Architectural desktop2:
> >
> > "Failed to update the system registry. please try using regedit".
> >
> > I found this article at the KB of AutoDesk concerning this error:
> >
> > ID: TS55765 "Running AutoCAD 2000 as a Domain User on Microsoft Windows
> > 2000"
> >
> > Our problem is that the article above refers to a DOMAIN and instructs
to
> do
> > changes at a DOMAIN CONTROLER. We use AutoCAD on a STAND ALONE server
> which
> > is not attached to any DOMAIN - that is why we can't follow the solution
> > supplied from AUTODESK.
> > I also tried to move the autocad user to power users group and it
worked,
> > but the power users group has wide permissions on the server which I
can't
> > alow. the user must stay a regular user.
> >
> > I hope someone will be for assistant.
> >
> > Miky Heiman
> >
>

[#10]

I agree. This should be documented somewhere by autodesk. Some companies have a security
policy that does not allow the users to have the control required by autocad.

Our current company policy doesn't allow people to modify \winnt and most of it's subs
(with the exception of the profile and other specific folders). Most NT Administration
books recommend this configuration. Anything less allows users to completely destroy
their machine at their own will. We've had cases very similar to this. One of our
departments got some new program and of course tried to install it on all of the machines.
Our security policy would not allow this so finally they came to IS and said "we need this
installed on all of the machines TODAY". Before installing any software on a users
machine we install it on a test machine (usually one of ours, but we're supposed to be
smart enough not to keep important data on our C: drive). Sure enough the software
destroyed the NT installation, replacing files in \winnt and \system32, of course you
couldn't tell until you booted. If our users had the rights required to run autocad a
whole department would have been without computers (since the person installed the
software to everyone's machine before he figured out that it didn't work).

I don't have a problem with setting up whatever security is necessary to run autocad but I
do have a problem with allowing users to completely overwrite the os and registry just to
run an application.

MHO
jason martin
frankfurt-short-bruza

"Miky Heiman" wrote in message
news:5C8C0D9BF14B804211ACEB9417B93358@in.WebX.SaUCah8kaAW...
> Yes, I tryed to give Full control to the HKEY_LOCAL_MACHINE key in the
> regestry and full control to \winnt + subdirectories - but still - the
> error message keeps jumping! If only I could find the exact keys that the
> Autocad uses!
> Miky
>