Fri Sep 14 12:21:50 PDT 2007

I was able to get Quickbooks 2007 working with a non-admin account today…woot! Here's what I did:

• Create a user (let's call it "quickbooks") and put the user in the admin group. Set a password.

• Since our QuickBooks files are on a shared drive, I logged in as that user and mapped the share to a drive (let's say the Z: drive).

• Still as the quickbooks user, open up Windows Explorer. Select Tools -> Folder Options -> View and select "Launch folder windows in separate process". Log out.

• Log in as the ordinary user who needs to use Quickbooks and have them runas, using the quickbooks account: right-click on the Quickbooks icon, select Run As, then select the quickbooks account. Put in the password you set up.

• You may need to browse to the file rather than opening it up from quickbook's list of recently-opened files.

• I've also mapped the quickbooks drive in the ordinary user's account, and took care to map the drive to the same letter as in the Quickbooks account. I'm not sure if this is strictly necessary.

This isn't ideal — the explorer process in QB is still running privileged — but at least that's the only IE process running as admin.

And Bacula: tripped over a small thing. I'm running the btape utility to make sure our tape drive works with it. I ran bfill, rather than fill, then wondered why I got errors at the end. Turns out to be an old command that probably shouldn't be around anymore.

Now to run fill…another couple hours to go.

(permalink) (comments)