Wednesday, October 24, 2007

QuickBooks User Access Rights Problem

User Access Rights Problem: Windows XP and Windows 2000 users must have Power Users or Administrator group rights in order to run QuickBooks.
Please contact your system administrator about being granted these rights.

Answer:
IMPORTANT: The following procedures are intended ONLY for the system administrator, preferably a Microsoft Certified Systems Engineer (MCSE). If you are not that person, please contact your system administrator for assistance.
These steps are intended to allow users with restricted or limited users access to basic QuickBooks functions without granting them Power User or Administrator privileges. If users who already have Power User or Administration privileges are receiving this error message, please refer to this QuickBooks Knowledge Base article.

Intuit strongly recommends that you create a current System Restore Point or System State Backup prior to making any of the changes listed below. The listed adjustments to the permissions are specifically targeted to QuickBooks. Always exercise extreme caution when editing the registry.


· Use System Restore to Undo Changes if Problems Occur
· Back up System State data

System administrators can now grant restricted or limited users access to QuickBooks without granting them Power User or Administrator privileges. The following configuration will allow restricted users to use all basic QuickBooks functions; however, advanced functions such as QuickBooks Update or Payroll Updates still require Power User or Administrator access.
· 1. Create a local group account called QuickBooksUser (or other preferred name).
· 2. Add the desired Group or User accounts to the newly created group members.
· 3. Edit permissions to Allow: Full Control for QuickBooksUser in the Access Control List for the following files and registry keys:
File System:
· C:\Program Files\Intuit (This is the default folder; adjust the folder name as appropriate for custom installations.)
· C:\Program Files\Common Files\Intuit
Registry:
· HKEY_LOCAL_MACHINE\SOFTWARE\Intuit
· HKEY_CLASSES_ROOT\QuickBooks.CoLocator
· HKEY_CLASSES_ROOT\QuickBooks.CoLocator.1
· HKEY_CLASSES_ROOT\CLSID\{E53C85D6-E6D9-4BCF-A623-72062A99AA7F}
Note: In most cases, the instructions above suffice to allow full QuickBooks functionality based on the permissions of the QuickBooks user. In certain instances, an administrator may want to grant permissions to each of the keys individually for security reasons. A list of each of the individual keys can be found here.
Note: Domain administrators may wish to create a group policy or security template for propagation in the domain instead of creating a local group.

2 comments:

wayne said...

PROBLEM DESCRIPTION: Power Users or Administrator Group Rights Problems


Basically during the installation, certain registry keys were written incorrectly. This problem can usually be resolved by

granting Full Control for the 'Administrator' group for various Intuit Reg keys [and various Intuit file folders.]


Run REGEDIT and verify the 'Administrator' user having Full Control over these registry keys.

Registry Keys:

HKEY_LOCAL_MACHINE SOFTWARE Intuit

HKEY_CLASSES_ROOT QuickBooks.CoLocator

HKEY_CLASSES_ROOT QuickBooks.CoLocator.1


Then start QUICKBOOK - it should work !!!


**** EXCEPTION ****

If you are using Quickbook in network environment, you must give 'Everyone' user group Full Control over these keys, too.
Redo the REGEDIT.
MUST BE VERY CAREFUL DUE TO SECURITY REASON


If you are using Quickbook in network environment, you must edit the permissions for these file folders. Give the user group

'Everyone' Full Control over these to file folders.

File System:

C: Program Files Intuit (This is the default folder; adjust the folder name as appropriate for custom installations.)

C: Program Files Common Files Intuit


NOTE: This fix is for QuickBooks 2006 but may also work for QuickBooks 2005


Hope this works!

Fred Sexton said...

Thanks Wayne. That worked perfectly.