Hi All,

A user has read only privileges on the OS level in a environment. when we try to launch protool.exe it is throwing error saying user doesnot have access to HKEY_LOCAL_MACHINE\..\princeton softech.. registry tree. Can some one let me know if there is a way to fix this other than giving admin priveleges to user.
Help is highly appreciated.

Regards,
Manasa

------------------------------
Manasa Nelli
------------------------------

#InfoSphereOptim
#Optim

Hi Manasa,

Optim making use of Windows registry to keep some default values, most recent entered values. You have installed Optim using a default installation selection like who ever logged in would be able to run Optim. In this case either you need to have Read/Write permission to the windows registry tree or you can reinstall Optim by selecting "Only for me" assuming that you will have Read/Write permission to HKEY_CURRENT_USER\..\princeton softech.

Hope that helps.

Regards,

------------------------------
Tulasi Uppu
------------------------------

Thank you all for quick reply :) It will help me a lot.
Yeah Optim is installed in multiple user mode.

------------------------------
Manasa Nelli
------------------------------

Original Message:
Sent: 11-13-2018 01:40
From: Tulasi Uppu
Subject: Permission issues when launching the tool

Hi Manasa,

Optim making use of Windows registry to keep some default values, most recent entered values. You have installed Optim using a default installation selection like who ever logged in would be able to run Optim. In this case either you need to have Read/Write permission to the windows registry tree or you can reinstall Optim by selecting "Only for me" assuming that you will have Read/Write permission to HKEY_CURRENT_USER\..\princeton softech.

Hope that helps.

Regards,

------------------------------
Tulasi Uppu
------------------------------

We use the "Me Only" Option.  However, there are some functions that still require admin access.  Also, you may need to remove the indicator that you have to be admin run the program.  You will have to export the dbalias and optim dir registry entries, using Optim Config.  Then each new user will have to use Optim Config and import them and setup the personal options.  We have found that in some cases, Optim does not import the Optim Dir password correctly and you have to reset it in several places. We suspect it is when you are using the same product options file when upgrading but we have not proven that.

------------------------------
Joe Hattaway
------------------------------

Original Message:
Sent: 11-13-2018 22:41
From: Manasa Nelli
Subject: Permission issues when launching the tool

Thank you all for quick reply :) It will help me a lot.
Yeah Optim is installed in multiple user mode.

------------------------------
Manasa Nelli
------------------------------


Original Message:
Sent: 11-13-2018 01:40
From: Tulasi Uppu
Subject: Permission issues when launching the tool

Hi Manasa,

Optim making use of Windows registry to keep some default values, most recent entered values. You have installed Optim using a default installation selection like who ever logged in would be able to run Optim. In this case either you need to have Read/Write permission to the windows registry tree or you can reinstall Optim by selecting "Only for me" assuming that you will have Read/Write permission to HKEY_CURRENT_USER\..\princeton softech.

Hope that helps.

Regards,

------------------------------
Tulasi Uppu

Manasa,

The error you are seeing is caused by the way Optim has been installed.  During the installation, you are given the option of installing as Admin or an Individual User.  If you select Admin, you get the error you are seeing.  If as an Individual User, it updates the HKEY_LOCAL_USER portion of the registry and the user should have access to that portion.

I hope that helps.

------------------------------
JIMMY WILSON
------------------------------

​We always end up granting Admin rights to user IDs on the Optim server because it seems to invariably fail when an ID lacks this permission level. We haven't applied the 'only for me/individual user' option, but that may be a newer feature as IBM has always told us in the past that in order to execute Optim, the ID must have admin rights in order to access the registry keys.

------------------------------
Keith Tidball
Progressive Insurance
------------------------------

We've run into quite a few permission issues with client side Optim. We have a lot of corporate security tools that are constantly auditing, checking, controlling, or blocking processes (exe's or registry read/writes) which can cause issues. We've developed a pretty solid Windows 10 client installation process to install Optim to avoid most permission issues. 

Just a few notes on our experience with this. Take it with a grain of salt. As always, read the install manual first. ;-) 

• We create a custom install path called <DRIVE>:\OPTIM\ and give the installer account FULL folder permissions on that parent level folder. We now own it and every thing under it as the install user before beginning the install. 

• We always run the install with admin rights or at least elevated permissions. Admin rights are not really a silver bullet. It does not guarantee that the installer/user account has all the rights needed depending on what other 3rd party security controls and policies exists on your OS. 

• We never install Optim to a specific user profile. 

• We run the install for ALL users. 

• Do not use the C:\users\<user>\* path for the parent install folder. There are way too many corporate security controls controlling these user directories, at least in our environment.
• If installation is occurring on any version of Optim older than FP6 on Windows 10, we use compatibility mode on all the installer .exe's to make Optim work with Win10. This is a gray area. 

------------------------------
Danny Lankford
------------------------------