QuickBooks User Access Rights Problem

User Access Rights Problem: Windows XP and Windows 2000 users must have Power Users or Administrator group rights in order to run QuickBooks.
Please contact your system administrator about being granted these rights.

Answer:
IMPORTANT: The following procedures are intended ONLY for the system administrator, preferably a Microsoft Certified Systems Engineer (MCSE). If you are not that person, please contact your system administrator for assistance.
These steps are intended to allow users with restricted or limited users access to basic QuickBooks functions without granting them Power User or Administrator privileges. If users who already have Power User or Administration privileges are receiving this error message, please refer to this QuickBooks Knowledge Base article.

Intuit strongly recommends that you create a current System Restore Point or System State Backup prior to making any of the changes listed below. The listed adjustments to the permissions are specifically targeted to QuickBooks. Always exercise extreme caution when editing the registry.


· Use System Restore to Undo Changes if Problems Occur
· Back up System State data

System administrators can now grant restricted or limited users access to QuickBooks without granting them Power User or Administrator privileges. The following configuration will allow restricted users to use all basic QuickBooks functions; however, advanced functions such as QuickBooks Update or Payroll Updates still require Power User or Administrator access.
· 1. Create a local group account called QuickBooksUser (or other preferred name).
· 2. Add the desired Group or User accounts to the newly created group members.
· 3. Edit permissions to Allow: Full Control for QuickBooksUser in the Access Control List for the following files and registry keys:
File System:
· C:\Program Files\Intuit (This is the default folder; adjust the folder name as appropriate for custom installations.)
· C:\Program Files\Common Files\Intuit
Registry:
· HKEY_LOCAL_MACHINE\SOFTWARE\Intuit
· HKEY_CLASSES_ROOT\QuickBooks.CoLocator
· HKEY_CLASSES_ROOT\QuickBooks.CoLocator.1
· HKEY_CLASSES_ROOT\CLSID\{E53C85D6-E6D9-4BCF-A623-72062A99AA7F}
Note: In most cases, the instructions above suffice to allow full QuickBooks functionality based on the permissions of the QuickBooks user. In certain instances, an administrator may want to grant permissions to each of the keys individually for security reasons. A list of each of the individual keys can be found here.
Note: Domain administrators may wish to create a group policy or security template for propagation in the domain instead of creating a local group.