Insufficient Permissions to run MLS

Discussions around using and interfacing with the Church MLS program.
lajackson
Community Moderators
Posts: 9638
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Insufficient Permissions to run MLS

Postby lajackson » Wed Feb 28, 2018 9:11 pm

After the Windows 10 updates that loaded when the computer was started Sunday, a branch no longer has sufficient permissions to run MLS. They can right click and run as administrator, but as the lowly Unit ###### they no longer have sufficient permissions. Everything was fine a week ago.

One of the two Windows updates failed. Any suggestions?

russellhltn
Community Administrator
Posts: 29098
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Insufficient Permissions to run MLS

Postby russellhltn » Wed Feb 28, 2018 9:23 pm

You might try getting the other update to install.

The only thing I'd think you need admin rights for is to to install MLS patches. I suppose you could try the old "install over top" of the latest MLS.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.

lajackson
Community Moderators
Posts: 9638
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Insufficient Permissions to run MLS

Postby lajackson » Thu Mar 01, 2018 7:53 am

russellhltn wrote:You might try getting the other update to install.

One of the two Windows updates was thoroughly derided on the Internet. Perhaps I should uninstall it? But I suppose it would just come back. The one that failed was an even earlier one.

And apparently you need more permissions than I now have to even start MLS. I wonder where that change originated.

lajackson
Community Moderators
Posts: 9638
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Insufficient Permissions to run MLS

Postby lajackson » Thu Mar 01, 2018 11:36 am

GSC to the rescue. The last Windows 10 security update broke a lot of things. The workaround for now is to right click on the MLS icon and run as administrator. This doesn't make sense, because the Unit is already an admin, but it works. (They had additional instructions of it did not work, but I never got there.

The alternative is to reimage the computer. I am a little averse to that, because this computer has only been in place a few months and I am sick and tired of reimaging it. I do not know for certain, but I also suspect that as soon as the box was reimaged, the update would come down again and break it again.

Bonus points if you are still reading: backing out of the KB update does not solve the problem. Whatever it broke does not get fixed when you uninstall the update.

Finally, there was some discussion about a year and a half ago about a glitch in the LDS Provisioning program that changed permission settings on a few of the MLS files. Changing permissions back to full control does not solve this problem. Something else deeper inside of Windows has changed.

Two more points. The Windows update turned on the requirement to change passwords every 42 days. I turned it back off. And the Church IT folks have been scrambling since the update to fix it, with bunches of calls going into the GSC asking for help.

Add another nickel to my retirement fund.

russellhltn
Community Administrator
Posts: 29098
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Insufficient Permissions to run MLS

Postby russellhltn » Thu Mar 01, 2018 12:33 pm

lajackson wrote:The workaround for now is to right click on the MLS icon and run as administrator. This doesn't make sense, because the Unit is already an admin, but it works.


Yes, and no. Even if you're an administrator, there's a number of functions that require you to "run as Administrator". (Unless you turn off UAC.) The question is: what's triggering that? MLS is supposed to be writing all it's files to C:\ProgramData, which doesn't require any special rights. If it's tampering with the files in C:\Program Files, C:\Program Files (x86), Windows or someplace like that, then that could explain the prompt. If I get that complaint about a machine in my stake, I'd probably run a trace to see what it's messing with.

As a thought, I'm wondering if Microsoft is depreciating the version of Java that MLS runs on. I haven't look in quite awhile to see what it's running.


lajackson wrote:The Windows update turned on the requirement to change passwords every 42 days.

The two small Levono machines we got a couple of years ago had that setting as part of their image. I doubt if it's Microsoft turning it on. I'd be far more suspicious of the church's configuration somewhere. But since the machines get their updates from the church servers (as opposed to getting it from Microsoft directly), it's possible that configuration came with the updates.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.

wlewis
New Member
Posts: 3
Joined: Mon Jul 16, 2018 6:09 am

Re: Insufficient Permissions to run MLS

Postby wlewis » Tue Sep 15, 2020 9:34 am

As of 9/15/2020 is this still the case?

russellhltn
Community Administrator
Posts: 29098
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Insufficient Permissions to run MLS

Postby russellhltn » Tue Sep 15, 2020 10:56 am

wlewis wrote:As of 9/15/2020 is this still the case?

This thread is about a very specific problem that I'm sure was resolved.

However, it's still true that MLS users should be using an account that is an Administrator. Also, the rights on the data area have to be set such that the user has access to it without having to be an Administrator.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.

lajackson
Community Moderators
Posts: 9638
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Insufficient Permissions to run MLS

Postby lajackson » Tue Sep 15, 2020 5:33 pm

russellhltn wrote:This thread is about a very specific problem that I'm sure was resolved.

Nope. It just has not had a very high priority.

russellhltn
Community Administrator
Posts: 29098
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Insufficient Permissions to run MLS

Postby russellhltn » Tue Sep 15, 2020 5:44 pm

I stand corrected. It was discussed in a different thread. I'm pretty certain the problem is the user doesn't have access to the data files unless they "show their Admin card". Change the rights to the data files so the user has access outside of being an Admin and the problem will go away.

In many installs, they'll get those rights be being the "Creator Owner". But if MLS was installed under a different user name, then they won't.

The issue is Administrators are not given Admin access unless they do a "Run As Administrator".
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.

lajackson
Community Moderators
Posts: 9638
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Insufficient Permissions to run MLS

Postby lajackson » Tue Sep 15, 2020 5:47 pm

I understand the theory. I do not know exactly which keys to press to make it happen. I thought at first the problem was because two units were using the machine, but both of them have the same problem. Perhaps MLS was installed under a third Admin account?


Return to “MLS Support, Help, and Feedback”

Who is online

Users browsing this forum: No registered users and 1 guest