Please enable JavaScript to view this site.

Thread Validator Help

Navigation: Overview

User Permissions

Scroll Prev Top Next More

 

This section details the privileges a user requires to successfully run Thread Validator.

 

note Typically, Administrator and Power User user types will already have the appropriate privileges.

 

 

Why do user privileges matter?

 

Debugging tools such as Thread Validator are intrusive tools - they require specific privileges not normally granted to typical applications.

 

Thread Validator requires specific privileges to write to the default user profile in the registry.

 

This is so that when Thread Validator is working with services (or any application run on an account which is not the current user's account) it can read the registry and the correct configuration data.

 

If the account upon which a service or application is running is not the user's account, the fallback position is the DEFAULT account in HKEY_USERS\.DEFAULT.

 

You can enable and disable various warnings using the User Permissions Warnings dialog.

 

 

User privileges

 

Thread Validator requires the following privilege to allow debugging of applications and services:

 

       Debug Programs (SE_DEBUG_NAME)

 

Ordinary users will need to be granted these permissions using the Administrative User Manager tool. The example below shows the NT4 User Manager - the Windows 2000 User Manager and Windows XP User Manager will be different but similar in principle.

 

securityUserManager

 

In the User Manager select the user - in this case "Test User".

 

Choose: Policies Menu instructionStep User Rights instructionStep check Show Advanced User Rights instructionStep select Debug Programs in the Right drop down list

 

securityDebugPrograms

Click Add.... instructionStep Show Users

 

securityUsersAndGroups

 

Select [ComputerName]\Test User in the top list. Click Add instructionStep OK instructionStep OK instructionStep Close the User Manager.

 

 

Registry access privileges

 

Thread Validator requires read and write access to:

 

HKEY_CURRENT_USER\Software\SoftwareVerification\ThreadValidator

 

HKEY_USERS\.DEFAULT\Software\SoftwareVerification\ThreadValidator.

 

This is used when working with services

 

If read and write access is not allowed:

 

Thread Validator will use default settings (thus any user selections will not apply)
 

Error messages will be displayed when Thread Validator tries to access the registry key

 

These error messages can be suppressed if they are not desired. For example, if you're not working with services, then there's no requirement to access the second registry key, and all error messages relating to it can be ignored.

 

You can modify the registry access permissions using the regedt32.exe tool Security menu (or similar). Ask your administrator to modify your registry access permissions if you can't do this yourself.

 

seeAlsoWhat's the difference between Regedit and Regedt32?externalLink

 

 

Error notifications

 

When Thread Validator fails to gain access for read or write to the registry a message box is displayed indicating if the error is for the user interface (UI) or Services. The message indicates the name of the registry key that failed and the failure reason.

 

This simple message box is displayed during early startup and late close-down of Thread Validator:

 

registry1

 

Message boxes like the following are displayed when Thread Validator is not starting up or closing down. The messages differ in the registry key.

 

registry-warning2

 

registry-warning1

 

 

Detailed registry access error messages

 

The following detailed registry access error message is also displayed when failing to gain access to the registry keys.

 

registryDetail1

 

 

Insufficient user privileges

 

The following dialog is displayed if a user has insufficient privileges to use the software correctly.

 

securityInsufficientPrivilege

 

 

note Without the Debug Programs privilege, Thread Validator will not work correctly with Services, and may not work correctly with Applications.

 

seeAlso How to create Power User accounts for Windows XP.