What permissions are required to run the Policy Editor

  • 7022927
  • 07-May-2018
  • 08-May-2018

Environment

Change Guardian 5.x
Change Guardian 4.x

Situation

Policy Editor fails to launch and attempts to install.  
Are specific permissions required to launch the CG Policy Editor?

Resolution

The Change Guardian Policy Editor must be launched while logged in with an account that has local administrative rights.  Launching the Policy Editor can also be done with an elevated account that is not logged in however the account must have Local Administrative rights.  

Cause

The account used to launch and run the Change Guardian Policy editor must have Local Administrative rights to allow the account access to the encryption keys.  
The encryption keys are a security feature of the product to make it more secure.  If an account that does not have local administrative rights the Policy Editor will not launch at all and in some cases attempt an installation.