Skip to Content
0

How can we launch Crystal Reports without Administrative Privileges?

Sep 29, 2017 at 02:18 PM

286

avatar image
Former Member

We have Crystal Reports, and when one of our users on Windows 7 Professional with a standard user account (not local administrator) attempts to launch the program, it fails with the error message “could not load a transcoding ser… Xerces Panic Error.”

The program will only launch if the user starts the executable as an administrator on the local computer. However, this is not a viable option since it is against our company security policy to give users admin rights on their computer. We tried the following two steps, but neither and both did not resolve the issue:

1. We gave all users on the computer full rights to the registry key: HKLM\Software\Classes\Mime\Database\Charset

2. We gave all users on the computer full rights to the directory:

C:\Program Files (x86)\Business Objects

and all subdirectories

We need a way to start the software on the computer without giving the user admin rights and without launching it as a local admin, as both of these methods violate our company security policy and can expose the computer to unnecessary threats.

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

5 Answers

Don Williams
Sep 29, 2017 at 08:55 PM
0

Why would you give users access to this registry tree?

1. We gave all users on the computer full rights to the registry key: HKLM\Software\Classes\Mime\Database\Charset

I've never heard of that being done before....

When you install CR it must have Admin rights, then when the user starts CR for the first time it should create a bunch of registry entries that work under their user account and the HKCU should then have the CR tree in it..

Does CR 2008 work or was it replaced with CR 2013?

Don

Share
10 |10000 characters needed characters left characters exceeded
Vitaly Izmaylov
Sep 29, 2017 at 05:11 PM
0

What is the version of Crystal Reports?

"C:\Program Files (x86)\Business Objects" is location for CR 2008 and below

for CR 2011 and higher it should be "C:\Program Files (x86)\SAP BusinessObjects"

The Registry locations Crystal reports is using are:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\SAP BusinessObjects\Suite XI 4.0\Crystal Reports

HKEY_CURRENT_USER\SOFTWARE\SAP BusinessObjects\Suite XI 4.0\Crystal Reports

I think you need to reinstall Crystal Reports by Machine Administrator or at least Run setup.exe As Administrator.

Show 1 Share
10 |10000 characters needed characters left characters exceeded
Former Member

We have the 2008 full install and the 2013 upgrade on the same computer. We did a repair install as well as an uninstall and reinstall - we still get the error.

0
Vitaly Izmaylov
Sep 29, 2017 at 08:56 PM
0

I did additional research and found:

https://www.w7forums.com/threads/xerces-panic-error.6039/

It says the read rights should be given to the following registry

\HKEY_CLASSES_ROOT\MIME\DataBase\Charset\

but in your post you tried

HKLM\Software\Classes\Mime\Database\Charset

not exactly the same

Show 4 Share
10 |10000 characters needed characters left characters exceeded
Former Member

This didn't work either. Thanks for all our help though - we really appreciate it.

Can you please advise on next steps? Thanks again.

0

you can run process monitor when launching CR, it'll show which registry entries and directories/files CR is trying to access and where it gets errors/deny access.
Then you can correct those...

also, running a specific program "as administrator" is not really exposing the machine to potential hacks, unless the program being run has security issues. I can't imagine how CR falls in that category.

0
Former Member
Denis Konovalov

Thanks. Does SAP provide support via screen share if necessary?

Also, users do not have the ability to run "as administrator," so this is not an option - it only proves that it is possibly a permission issue. When I was referring to security issues, the only way around the issue now is to give the user local administrator rights since Crystal Reports is run unattended with automation - users are not given administartor passwords.

0

Yes, screen sharing is a standard option when SAP support is working with customers.

0
avatar image
Former Member Oct 04, 2017 at 04:45 PM
0

Can we please arrange to have this escalated and have a call/screen share? Local admin actually does not work - domain admin does.

Show 1 Share
10 |10000 characters needed characters left characters exceeded

Hi Greg,

This platform is free, if you want to work on the issue with a Rep you need to purchase a case or if you have a support Contract the log a case in SMP and a SAP Engineer will pick the case up.

https://www.sap.com/products/crystal-reports.html

Don

0
Vitaly Izmaylov
Oct 27, 2017 at 08:55 PM
0

Deleting

HKEY_CLASSES_ROOT\MIME\Database\Charset\Interface

registry key resolved the problem.
Share
10 |10000 characters needed characters left characters exceeded