Understanding the Components, NDS Rights, and File System Rights Used When Distributing and Launching Applications
Distribution of an application to a workstation, and the subsequent launching of the application on the workstation, can be handled by three different components: Application Launcher/Explorer, Application Launcher/Explorer Service for Windows NT/2000/XP/XP (NAL Service), or Application Launcher/Explorer Workstation Helper. For a description of each of these components, see Understanding Application Launcher/Explorer .
Which components handle the distribution and launching depends on the following:
The workstation's Windows version (95/98 or NT/2000)
Whether the application is associated with the workstation or with a user logged into the workstation
Whether the application is configured to run as the logged-in user or as the System user (Windows NT/2000/XP/XP only)
The tables in the following two sections describe which components are used to distribute and launch user-associated applications and workstation-associated applications.
Because these components require NDS rights and file system rights to distribute and launch applications, and these rights can come from various sources, the table also lists which sources provide these rights. Knowing whose NDS and file system rights are providing access for the components can help you avoid distribution and launching problems caused by insufficient or incorrect rights.
Distribution and Launching of User-Associated Applications
Event
Windows 95/98
Windows NT/2000/XP/XP
Distribution
Distributed by Application Launcher/Explorer
Access to NDS provided by the logged-in NDS user
Access to the workstation's file system provided by default
Distributed by NAL Service (Application Launcher/Explorer Service for Windows NT/2000/XP/XP)
Access to NDS provided by the logged-in NDS user
Access to the workstation's file system provided by the Windows System user
Launching (normal)
Launched by Application Launcher/Explorer
Access to NDS provided by the logged-in NDS user
Access to the workstation's file system provided by default
Run as logged-in user:
Launched by Application Launcher/Explorer
Access to NDS provided by the logged-in NDS user
Access to the workstation's file system provided by the logged-in Windows user
Run as secure/unsecure System user**:
Launched by NAL Service
Access to NDS provided by the logged-in NDS workstation (through Workstation object)
Access to the workstation's file system provided by the Windows System user
Launching (Force Run*)
Same as normal launch
Same as normal launch
* The Force Run setting causes the application to automatically run after being distributed. For information about configuring an application as Force Run, see Associating the Application Object with Users .
** The Secure System User and Unsecure System User settings apply to applications running on Windows NT/2000/XP only. These settings cause the application to run in the "system" space as the Windows System user rather than in the "user" space as the logged-in user. These settings are intended to ensure that users can run locally-installed applications even if they have limited file system rights on the workstation. If an application (running as a secure or uunsecure System user) will be executed from a network location or will require access to a network location, the workstation must also be logged in to NDS, which requires that the workstation have a Workstation object in NDS. For information about adding Workstation objects to NDS, see Automatic Workstation Import and Removal in the ZENworks for Desktops 3.2 Deployment Guide guide. For more about running an application as a secure or unsecure System user, see Environment Page .
Distribution and Launching of Workstation-Associated Applications
Event
Windows 95/98
Windows NT/2000/XP
Distribution
Distributed by Workstation Helper
Access to NDS provided by the logged-in NDS workstation (through the Workstation object)
Access to the workstation's file system provided by default
Distributed by NAL Service via the Workstation Helper
Access to NDS provided by the logged-in NDS workstation (through Workstation object)
Access to the workstation's file system provided by the Windows System user
Launching (normal)
Launched by Application Launcher/Explorer
Access to NDS provided by the logged-in NDS workstation (through the Workstation object)
Access to the workstation's file system by default
Run as logged-in user:
Launched by Application Launcher/Explorer
Access to NDS provided by the logged-in NDS user
Access to the workstation's file system provided by the logged-in Windows user
Run as secure/unsecure System user**:
Launched by NAL Service
Access to NDS provided by the logged-in NDS workstation
Access to the workstation's file system provided by the Windows System user
Launching (Force Run*)
Launched by Workstation Helper
Access to NDS provided by the logged-in NDS workstation (through the Workstation object)
Access to the workstation's file system provided by default
Run as logged-in user:
Launched by NAL Service
Access to NDS provided by the logged-in NDS workstation (through the Workstation object)
Access to the workstation's file system provided by the Windows System user
Run as secure/unsecure System user:
Launched by NAL Service
Access to NDS provided by the logged-in NDS workstation
Access to the workstation's file system provided by the Windows System user
* The Force Run setting causes the application to automatically run after being distributed. For information about configuring an application as Force Run, see Application Launcher Features .
** The Secure System User and Unsecure System User settings apply to applications running on Windows NT/2000/XP only. These settings cause the application to run in the "system" space as the Windows System user rather than in the "user" space as the logged-in user. These settings are intended to ensure that users can run the application even if they have limited file system rights on the workstation. For more information, see Environment Page .
