writing code that doesn’t require admin privileges


An internal email discussion on how to help people write code that doesn’t require administrative privileges yielded the following links, hope somebody out there finds this helpful:

Comments (2)

  1. Actually, your nutshell version of Designed for Windows XP Guidelines is incorrect. All the things you mentioned depend on file or registry key permissions, not the user’s group. It just so happens that this is true by default, but it does not have to be the case.

  2. Eric Jarvi says:

    Thanks for the comment. I’ve taken out the "nutshell version: non-admins can’t write files to" part to be a little more generic.

    That said, I’d be interested to know more about when you’ve seen this to be the case, because in general if an administrator loosens the default permissions on HKLM, HKCR, %PROGRAMFILES%, and %SYSTEMROOT% so that anyone CAN stomp all over them I figure you can pretty much kiss multi-user security goodbye.