Skip to main content
Kofax

Security policies require that our Windows users have more restrictive permissions than those documented in the Capture and VRS Installation Guides. What are the minimum Windows user permissions for installers and users of Capture and/or VRS products?

2482

QAID # 2482 Published

Question / Problem:

Security policies require that our Windows users have more restrictive permissions than those documented in the Capture and VRS Installation Guides.

What are the minimum Windows user permissions for installers and users of Capture and/or VRS products?

Answer / Solution:

The Capture Installation Guide details the user permissions required to run Capture. The VRS Installation Guide describes the permissions necessary to install and run VRS. The requirements documented in the Installation Guides are fully tested by Kofax and are simple to apply.

However, for administrators who wish to restrict user permissions further, there are minimum Windows User permissions that have been demonstrated to work with the following products:

  • Capture 7.x and 6.x
  • VRS 4.x and 3.5

The required privileges and permissions for the Kofax Capture 8.0 product are documented in Appendix D of the Kofax Capture Installation Guides, available in the Kofax Capture 8.0 Required Folder Permissions Application Note.

Minimum permissions for installing Ascent Capture and/or VRS

Ascent Capture and VRS must be installed by a member of the local Administrator Group. For Ascent Capture installs, the local Administrator account must also have Full Control of the Ascent share on the Ascent Capture server and all of the Ascent share’s subfolders.

Minimum permissions for using Ascent Capture and/or VRS

Ascent Capture and VRS users must have the following file permissions:

File or Folder Location Minimum Permissions Required

The local Ascent folder and all subfolders, if present

(typically c:\program files\ascent)

Full Control

The Kofax folder and all subfolders, if present

(typically c:\program files\Kofax)

The Ascent share on the Ascent Capture Server and all of the Ascent share’s subfolders

(typically \\server\ascentsv\)

The system and user Temp folder

(typically C:\Documents and Settings\UserName\Local Settings\Temp or c:\Temp)

Temporary Image Folder

(typically below the Ascent share, but is allowed to be elsewhere.)

Calera.ini

(typically found in c:\windows or c:\winnt)

Read, Read & Execute, Modify

kpmsw.ini

(typically found in c:\windows or c:\winnt)

Kfxisis.ini

(typically found in c:\windows or c:\winnt)

odbc.ini

(typically found in c:\windows or c:\winnt)

Kofax200.ini

(typically found in c:\windows or c:\winnt)

odbcinst.ini

(typically found in c:\windows or c:\winnt)

Kofaxkim.ini

(typically found in c:\windows or c:\winnt)

pixcache.ini

(typically found in c:\windows or c:\winnt)

Kpm.ini

(typically found in c:\windows or c:\winnt)

setscan.ini

(typically found in c:\windows or c:\winnt)

Kpmadr.ini

(typically found in c:\windows or c:\winnt)

vcdem32p.ini

(typically found in c:\windows or c:\winnt)

Kpmcache.ini

(typically found in c:\windows or c:\winnt)

vrsinput.ini

(typically found in c:\windows or c:\winnt)

Kpmcolpr.ini

(typically found in c:\windows or c:\winnt)

Kpmcrtnt.ini

(typically found in c:\windows or c:\winnt)

All users must have the following Registry permissions:

Registry Key Minimum Permissions Required
HKEY_CURRENT_USER\Software\Kofax Image Products Full Control
HKEY_LOCAL_MACHINE\Software\Kofax Image Products Read (VRS users must have Full Control)
HKEY_LOCAL_MACHINE\Software\Kofax

SecurityBoost

Based on your Group Policy settings, additional permissions may be required when using the SecurityBoost feature. The SecurityBoost account should be granted full control to the HKEY_CURRENT_USER Registry hive. This will permit the SecurityBoost account to access the current user's settings so that Windows can continue processing the credentials.

Applies to:

Product Version Category
CAPTURE 5.0 Installation
CAPTURE 5.5 Installation
CAPTURE 5.51 Installation
CAPTURE 6.0 Installation
CAPTURE 6.1 Installation
CAPTURE 7.0 Installation
CAPTURE 7.5 Installation
CAPTURE 8.0 Installation
VRS 3.0 Installation
VRS 3.1 Installation
VRS 3.5 Installation
VRS 4.0 Installation
VRS 4.1 Installation
VRS 4.2 Installation

Keywords: Best Practices

  • Was this article helpful?