prim18839:Minimum Permissions required for Primavera Enterprise under Terminal Services 2000/2003 and Citrix Metaframe/Presentation Server

Whenever a user, without administrator rights, logs into a Windows PC and tries to access the application, the user can run into any combination of the following error messages:

The file C:\Program Files\Primavera\Project Management\PM.ini cannot be set to read-write status.

AVAA0-1004-5 Access violation at address 004a2940 in module PM.exe

Event Code UTWTF-2224-4

The instruction at 0x004a2b05 referenced memory at 0×000. The memory could not be read.

These errors are a result of the user not having access rights to the proper directories and registry keys.

Fix:

Have an administrator log into the PC and give the user Read and Write access to the Borland directory, the \Program Files\Primavera directory, the Java bootstrap file (C:\Program Files\Common Files\Primavera Common\Java\BREBootStrap.xml) and the user’s Temp directory.  Additionally, the administrator has to go into REGEDT32 and give the user full permissions to the Borland registry key and the Primavera registry key found in HKEY_LOCAL_MACHINE/SOFTWARE. Note the machine must be restarted after making these changes. When running Primavera as a Published Web Application – grant the group “Anonymous’ the permissions above.

To grant Primavera users the required permissions,  refer to the options below:

Option 1

Add user accounts to the Local Administrator group (must be logged in as an Administrator).

1. Go to Start, Settings, Control Panel.
2. Click on the Users and Passwords icon.
3. Highlight the user and click on ‘Properties’
Notice that there may be two User Names’ that are the same. One may be a local account specific to the PC and the other is a domain account. The account that is going to be used daily, typically the domain account, is the one that you want to be part of the Power Users or Administrators Group.
4. On the Group Membership window, click on ‘Other’ and choose Administrator.

Option 2

Add user account to the Power Users group.
Follow the same steps as Option 1, except in step 4 click on ‘Standard user’ on the Group Membership window.

Option 3

Give user Full Control of Borland key and the Primavera key in registry.
NOTE: Always Backup the registry prior to making changes.

1. Logged in as an administrator, select Start, Run and type in REGEDT32
2. Highlight the HKEY_LOCAL_MACHINE\Software\Borland key and the KEY_LOCAL_MACHINE\Software\Primavera
3. Click on the Security menu and choose Permissions.
4. Highlight the user account and check the Allow box for Read and Full Control. If the user account is not displayed in the Name window, click the Add button to get a full list of local user accounts and domain accounts that can be added to the Name window. Once this is complete click OK.

Note: Allowing the Everyone group Read and Full Control to the Borland key and the Primavera key will give all users the proper access.

The final step for all options is to log off the PC with the administrator account and log back in with the user account.