How to do group policy to set the Quickbooks permissions:

Step one

Read this first - http://www.quickbooks.com/support/faqs/qb2006/a4edfd81.html

TO RUN QUICKBOOKS IN USER MODE USING GROUP POLICY

Step one: 

Set up a new Organizational unit

Start by clicking on Server Management at the top of the Start Menu

Expand Advanced Management, click on the Active Directory Users and Computers

On the right hand side will be "add a new security group"

Go through the wizard to add a new security group

Name the group

Add the users you need to give these special permissions to

Ensure only those users you want to have these permissions are added on the right side, click next

Click Finish

Step Two:  Set the permissions:

Now in SBS 2003 (RTM, SP1  or R2) but if you are still running RTM please upgrade to SP1, open up the group policy management console

Your group policy console should look something like this:  (I've stuck more ones in there but you get the idea)

Now begin to build the policy, by right mouse clicking on the domain name and click on "Create and Link a GPO here"

Name the GPO

Click OK

Go back to the named Group policy, right mouse click and hit edit

Drill down to Computer Configuration, then Windows Settings, then File System

Click Add File

You'll see this window

Now type in C:\Program Files\Intuit

Click OK

[it will automatically 'flip it' to %Program File%\Intuit]

You'll then get a permissions screen

Preferably at this screen you should choose an Organizational Unit that you've set up rather than individual 'users"

For purposes of this exercise I'm going to specifically click "Add" and add a specific user

Click on Advanced

Then on Find Now

You would want to select the Organization unit, click OK

And it should look like this

Add full control

Leave the "propagate" checked

Now do this again for C:\Program Files\Common Files\Intuit

And again, add the group

And open up the permissions for "full control'

It should look like this:

Now do this for the Registry:

We need to open up

• HKEY_LOCAL_MACHINE\SOFTWARE\Intuit
• HKEY_CLASSES_ROOT\QuickBooks.CoLocator
• HKEY_CLASSES_ROOT\QuickBooks.CoLocator.1
• HKEY_CLASSES_ROOT\CLSID\{E53C85D6-E6D9-4BCF-A623-72062A99AA7F}

Click on Registry, right mouse click, on "Add Key"

Remember we have to strip off the "HKEY" part

Drill down to "Machine" which is the equivalent of HKEY_Local_Machine

Add a slash and Intuit

Click OK

Just like before now you are ready to set user permissions

Click add

Add full control

Again allow propagation

Right click again on Registry, add key

Add  the three ClassesRoot one at a time....

• HKEY_CLASSES_ROOT\QuickBooks.CoLocator
• HKEY_CLASSES_ROOT\QuickBooks.CoLocator.1
• HKEY_CLASSES_ROOT\CLSID\{E53C85D6-E6D9-4BCF-A623-72062A99AA7F}

cut and paste this to put in the box -CLASSES_ROOT\QuickBooks.CoLocator

click OK, add the user or group you want, add full permissions just like the other ones,  (see how easy this is?)

And as before, click add user

 skipping a few steps but it works like before, add the organizational unit and add Full Control

Click okay, allow for propagation

and

add another registry key:

Cut and paste this to put in the box - CLASSES_ROOT\QuickBooks.CoLocator.1

click OK, add the user or group you want, add full permissions just like the other ones,

And as before, click add user

 skipping a few steps but it works like before, add the organizational unit and add Full Control

Click okay, allow for propogation

Add another registry key:

(cut and past this to place in the box -- CLASSES_ROOT\CLSID\{E53C85D6-E6D9-4BCF-A623-72062A99AA7F}

And as before, click add user

 skipping a few steps but it works like before, add the organizational unit and add Full Control

Click okay, allow for propogation

Do the same for the other two

It should look list this:

Now at the server at a command prompt type in

gpupdate /force

To force the permissions changes

(but honestly... buying Quickbooks 2007 that supports non admin natively is WAY easier ;-)