Monitor software install for user / XP

[AnthonyAbbey]

Working in a domain and trying to get software to run on a client computer. The software runs fine when an administrator is logged in (i.e. me), but not for the user (gets a runtime 53 error, file not found). I’m sure we have all had this problem before.

Last year I had the same problem with another piece of software and I found an application on the internet that ran only when logged in as a user. You selected the software you as trying to run and it told you exactly what files and registry keys it was trying to access. This way I was able to give the users permission to that file / registry key rather than the entire system.

Iv forgotten what the software was called. !!!!

I have searched high and low and can’t find it.

I have tried Microsoft’s Process Monitor but threes 2 problems with it, its too detailed, so I don’t know what the software is running (because it shows you every process that Windows is running) and also it won’t run under a user (even when I try run as).

Does anyone know either the software I’m looking for, or an alternative method?

Thanks for your help.

[Tripredacus]

Did you install the software on the client with Add/Remove Programs or the software's own installer? You may get better methods if you use Add/Remove Programs to install. There is a button there to do it.

[cluberti]

It should be relatively easy to pare down process monitor to show you just what that one process is doing. First, you need to use runas to run the process monitor binary, otherwise as you said, it won't work. Second, you need to filter down just to the file level accesses, and then filter further for only accesses made by the .exe file that you are running (use the filter dialog for filtering on the .exe, and use the buttons in the toolbar to remove everything but filesystem activity). Once you've captured your log and filtered it, save it out to a .csv file, open it in Excel or whatever you use for .csv files, and then filter on things like file not found, access denied, etc. You can find it, you just have to know how to filter.

[AnthonyAbbey]

Sorry for the late reply.

Thanks for your suggestions, il give it a go now.