by Michael S. Kaplan, published on 2007/04/23 18:31 +00:00, original URI: http://blogs.msdn.com/michkap/archive/2007/04/23/2248563.aspx
An interesting question came up the other day in relation to EUDC (which I have talked about before):
Hi,ALL
I have a question about installation of "Private Character Fonts " using "users authorization".
Currently my customer uses windows XP and users downloads Private Character fonts files distributed by administrators, then apply them to fonts folder and update it.
But administrators cannot add permission to users since fonts folder doesn’t have security tab on Windows Vista.
Following is output of access rights when administrators run "icacls",
C:\Windows>icacls C:\Windows\fonts
C:\Windows\fonts NT SERVICE\TrustedInstaller:(F)
NT SERVICE\TrustedInstaller:(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(M)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Administrators:(M)
BUILTIN\Administrators:(OI)(CI)(IO)(F)
BUILTIN\Users:(RX)
BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
CREATOR OWNER:(OI)(CI)(IO)(F)
I tried to change access rights by using /grant option, but I got “access denied” and couldn’t change access rights.
And when users access EUDC editor without UAC, following error is displayed,
「To use the EUDC editor,you must have write access to the Fonts folder. Ask your administrator to give you this access.」
But I don’t know how administrators add permissions to users.
Based on above information please tell me operation to add permissions to fonts folder or customized way for vista.
Now here we have a good example of taking a simple problem and coming up with a complex solution (and then making the solution much more complex in Vista with UAC!).
As a start, there is a well-documented way to install fonts created by EUDC Editor on other machines, at topics like this one, which basically help give you an easy technique that along with a call to EnableEUDC to clear out the cache by passing FALSE and then another to load the fonts by calling it passing TRUE, makes it easy to both provide fonts and provide updates to those fonts. And since the defined registry key is under HKCU, one does not need administrative permissions to use it!
Now this leads to another question: if EUDC fonts do not have to be put in the Fonts folder then why does EUDC Editor put them there?
And further, why does it require administrative permissions?
The answer those two questions (as far as I can tell) is because it was not updated and because this non-update requires those permissions to do what it was doing already.
But smart developers like Claude Bétrisey have pointed out that there really ought to be an easy installation method provided to ad the registry information and call EnableEUDC appropriately.
Forcing installation through an authoring tool when no authoring is likely to be needed is like forcing you to install MSKLC to use a keyboard layout.
Which if we did with MSKLC, many would consider to be bad. Including me!
So perhaps there needs to be an update to EUDC Editor to provide installation packages that do not require administrative permissions? :-)
(I'll talk more about EUDC another day, and I won't take as long to do so as I did the last time I said I would!)
This post brought to you by ㌍ (U+330d, a.k.a. SQUARE KARONI)
referenced by