Insufficient Permissions to run MLS

Discussions around using and interfacing with the Church MLS program.
lajackson
Community Moderators
Posts: 8622
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Insufficient Permissions to run MLS

Postby lajackson » Wed Feb 28, 2018 9:11 pm

After the Windows 10 updates that loaded when the computer was started Sunday, a branch no longer has sufficient permissions to run MLS. They can right click and run as administrator, but as the lowly Unit ###### they no longer have sufficient permissions. Everything was fine a week ago.

One of the two Windows updates failed. Any suggestions?

russellhltn
Community Administrator
Posts: 26360
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Insufficient Permissions to run MLS

Postby russellhltn » Wed Feb 28, 2018 9:23 pm

You might try getting the other update to install.

The only thing I'd think you need admin rights for is to to install MLS patches. I suppose you could try the old "install over top" of the latest MLS.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.

lajackson
Community Moderators
Posts: 8622
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Insufficient Permissions to run MLS

Postby lajackson » Thu Mar 01, 2018 7:53 am

russellhltn wrote:You might try getting the other update to install.

One of the two Windows updates was thoroughly derided on the Internet. Perhaps I should uninstall it? But I suppose it would just come back. The one that failed was an even earlier one.

And apparently you need more permissions than I now have to even start MLS. I wonder where that change originated.

lajackson
Community Moderators
Posts: 8622
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Insufficient Permissions to run MLS

Postby lajackson » Thu Mar 01, 2018 11:36 am

GSC to the rescue. The last Windows 10 security update broke a lot of things. The workaround for now is to right click on the MLS icon and run as administrator. This doesn't make sense, because the Unit is already an admin, but it works. (They had additional instructions of it did not work, but I never got there.

The alternative is to reimage the computer. I am a little averse to that, because this computer has only been in place a few months and I am sick and tired of reimaging it. I do not know for certain, but I also suspect that as soon as the box was reimaged, the update would come down again and break it again.

Bonus points if you are still reading: backing out of the KB update does not solve the problem. Whatever it broke does not get fixed when you uninstall the update.

Finally, there was some discussion about a year and a half ago about a glitch in the LDS Provisioning program that changed permission settings on a few of the MLS files. Changing permissions back to full control does not solve this problem. Something else deeper inside of Windows has changed.

Two more points. The Windows update turned on the requirement to change passwords every 42 days. I turned it back off. And the Church IT folks have been scrambling since the update to fix it, with bunches of calls going into the GSC asking for help.

Add another nickel to my retirement fund.

russellhltn
Community Administrator
Posts: 26360
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Insufficient Permissions to run MLS

Postby russellhltn » Thu Mar 01, 2018 12:33 pm

lajackson wrote:The workaround for now is to right click on the MLS icon and run as administrator. This doesn't make sense, because the Unit is already an admin, but it works.


Yes, and no. Even if you're an administrator, there's a number of functions that require you to "run as Administrator". (Unless you turn off UAC.) The question is: what's triggering that? MLS is supposed to be writing all it's files to C:\ProgramData, which doesn't require any special rights. If it's tampering with the files in C:\Program Files, C:\Program Files (x86), Windows or someplace like that, then that could explain the prompt. If I get that complaint about a machine in my stake, I'd probably run a trace to see what it's messing with.

As a thought, I'm wondering if Microsoft is depreciating the version of Java that MLS runs on. I haven't look in quite awhile to see what it's running.


lajackson wrote:The Windows update turned on the requirement to change passwords every 42 days.

The two small Levono machines we got a couple of years ago had that setting as part of their image. I doubt if it's Microsoft turning it on. I'd be far more suspicious of the church's configuration somewhere. But since the machines get their updates from the church servers (as opposed to getting it from Microsoft directly), it's possible that configuration came with the updates.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.


Return to “MLS Support, Help, and Feedback”

Who is online

Users browsing this forum: No registered users and 0 guests