I read this article a fair while ago and its stuck in the back of my head.
We have a mission critical application here at work which from an admins point of view is a nightmare. Its brilliant from the users point of view, it makes their jobs alot easier and automates alot of the day to day jobs which are they are required to complete.
So why is it an admins nightmare?
Well, under a normal domain user account it will run without issue, the problems comes when you need to use one of the specific functions. This ‘specific function’ merges data with a set of templates via Microsoft Word. Upon trying to merge, the application crashes.
If you give the domain user local power user privileges then the whole process works fine.
Anyone who works in I.T or knows even a little bit will realise giving users elevated privileges poses a high security risk not only to the workstation but the network too.
Most are familiar with ‘principle of least privilege’, i means that a user should be given only the privileges necessary to accomplish his or her task without exposing the rest of the network to security risks.
So where do I go from here; I’ve ran through most of advise on the article, none of which helped expose the issue, I’ve also used a program call LUABuglight written by Aaron Margosis. Its a fantastic application but again didn’t really expose the issue.
My last real hope is to speak to the software vendors who to be honest have never been to caring when it comes to these sorts of issues, the usual attitude from them is that if its not a bug in the latest feature addition they don’t really care.
If you have had any similar experiences I would be interest to her about them and the outcome.