It sounds like I need to clarify what is going on in the office:
- Amazing Charts is installed on every computer
- Amazing Charts uses the data base on the application server
- The permissions on the domain users are setup correctly on the amazing charts folder on the server
- Users are not part of the administrators group on the domain or part of the domain admin group on the domain
- on each physical computer there is a local Windows administrator group and this contains the group domain users
Amazing Charts works fine in this arrangement.
This setup allows users to install programs on their local computers. This includes viruses.
The terminal server (a Windows 2003 server) also has to be setup this way to enable users to log in from home and run Amazing Charts.
Seting up each computer to allow staff to install programs is a big security hole. I would like to close it up.
For example, users do not have to be part of the local computer's administrator group to run Office or other programs.
When I took the domain users out of the administrators group on a computer then Amazing Charts gave error messages and would not run. When I called the problem in Amazing Charts technical staff responded very quickly. The told me that users have to be part of the local administrators group for Amazing Charts to run in a Windows domain environment.
