MasterCAM local PC privileges question.

[stanektool]

We've recently been receiving a lot of IT security questionnaires from our customers.  They're wondering what we're doing to make sure their IP is protected from theft and prying eyes.  One of the many questions across all of the questionnaires is, Do you use least privilege practices at the local workstation?  My answer has to be no, because I give those who use MasterCAM local admin.  I want to be able to change that answer to yes and I'd like to start by only giving MasterCAM users necessary access to the local computer.

Can anyone give me a definitive list of locations on the local computer where MasterCAM needs write or modify access?  For instance, on first execution, to which registry locations does the user need to write/modify?  Are there any other locations that I need to keep in mind?

Right now my list contains:  

• %Program Files%\McamXXXX (Full Control)
• %SystemDrive%\Users\Public\Documents\shared McamXXXX (Full Control)
• %UserProfile%\Documents\my McamXXXX (Full Control)
• HKEY_CURRENT_USER\Software\CNC Software, Inc.
• HKEY_LOCAL_COMPUTER\Software\CNC Software, Inc.

Thanks for the help.

[Guest]

2 minutes ago, stanektool said:

• %SystemDrive%\Users\Public\Documents\shared McamXXXX (Full Control)
• %UserProfile%\Documents  (Full Control)

We have access to this only.... 

Any installing/uninstalling MUST be done by IT

Edited June 27, 2018 by Guest

[stanektool]

5 hours ago, JParis said:

We have access to this only.... 

Any installing/uninstalling MUST be done by IT

Let's say your company hires a new user who needs to run MasterCAM on the same PC you're using.  How do they facilitate MasterCAM making it's initial settings in the HKEY_LOCAL_MACHINE registry hive when that new user logs in and runs MasterCAM for the first time?  

[Guest]

22 minutes ago, stanektool said:

Let's say your company hires a new user who needs to run MasterCAM on the same PC you're using.  How do they facilitate MasterCAM making it's initial settings in the HKEY_LOCAL_MACHINE registry hive when that new user logs in and runs MasterCAM for the first time?  

Wouldn't happen here, so not sure how they would handle it