Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Non-admins cannot view embedded QuickTime videos

I'm hoping that somebody may have run across this before and knows a way to fix this problem or at least can point me in the right direction. I've tried doing a search for this same problem, but so far found nothing that was helpful in fixing it.

I work in the Computer Services department of a company that uses Windows XP SP3 PCs to log on to our domain. There are three different models of computer being used, all of which are having this same problem. My department was recently made aware that embedded QuickTime videos would not work at http://iris.peabody.vanderbilt.edu (we have verified that other sites have the same problem). We were told that when the person tried to view a video a "Q" with a question mark over it appeared and nothing else. The web site is being accessed with Internet Explorer 7. We have since tested and verified that the same problem occurs in FireFox 3.5, Opera 10, and Google Chrome 3.0.

We found out that the described problem was occurring when non-administrative accounts logged on (which accounts for nearly all of our users), but when an administrator was logged on the site worked just fine.

Here is what I have tried so far:

The PCs were running QuickTime 7.6. I updated a computer to QuickTime to 7.6.5. The problem still existed after the update.

On another computer, I uninstalled QuickTime from the computer. I shut down the computer, turned it back on, and installed QuickTime 7.6.5. The problem still existed after doing this.

During the course of troubleshooting this issue using another computer, I found that non-administrator accounts can download the QuickTime installer and run it. The installer does install the latest version of QuickTime, even though the user is non an administrator. That user can then view the embedded videos with no problem. However, any other non-administrator account that logs in that computer still cannot view the embedded videos.

I set up a test PC, logged in to it with a non-administrator account (to make things simpler, I will refer to that account as "Account A" from now on), and installed the latest version of QuickTime. I verified that the embedded videos now worked for that account. Then, I logged on with another non-administrator account ("Account B") and verified that the embedded videos still do not work. I copied the NTUSER.DAT file from the profile folder of Account A ("C:Documents and Settings\Account A") into the profile folder for Account B ("C:Documents and Settings\Account B"). I then logged on using Account B. The embedded videos still did not work for Account B.

I copied everything from the profile folder for Account A into the profile folder for Account B. We then logged on as Account B. The embedded videos still did not work.

Since the NTUSER.DAT file made no difference it seems unlikely there there is an HKEY CURRENTUSER registry key that allows embedded QuickTime files to play. Since copying all the files/folders in Account A did not work, it seems unlikely that there was a file of some sort that was put in the Account A profile that allows embedded QuickTime videos to play.

I have tried checking for folders or files that were Account A has been granted security permissions that have not been given to "Users" or "Everyone". So far I have not been able to find such folders or files.

If anybody has any suggestions on other things to try to fix this problem it would be greatly appreciated.

Windows XP Pro

Posted on Dec 14, 2009 7:21 AM

Reply
Question marked as Best reply

Posted on Dec 14, 2009 11:13 AM

No immediate answers for you, I'm afraid, but we can try some basic principles troubleshooting/brainstorming if you'd like.

What initially springs to mind is a query about security policies (group or otherwise) for non-administrative accounts on the PCs. Are the non-admin accounts able to either install ActiveX controls or register downloaded plugins for browsers?

(Thinking that a block on installing the QuickTime ActiveX control might produce the IE 7 behavior, and a block on registration of plug-ins might produce the Opera, Firefox and Chrome effects.)
7 replies
Question marked as Best reply

Dec 14, 2009 11:13 AM in response to hw_wc

No immediate answers for you, I'm afraid, but we can try some basic principles troubleshooting/brainstorming if you'd like.

What initially springs to mind is a query about security policies (group or otherwise) for non-administrative accounts on the PCs. Are the non-admin accounts able to either install ActiveX controls or register downloaded plugins for browsers?

(Thinking that a block on installing the QuickTime ActiveX control might produce the IE 7 behavior, and a block on registration of plug-ins might produce the Opera, Firefox and Chrome effects.)

Dec 14, 2009 11:59 AM in response to b noir

Thanks for the response.

Our non-admin accounts cannot install an ActiveX control nor can they register plug-ins.

It hadn't occurred to me to check the ActiveX controls or plug-ins. I opened IE7, went to the Tools > Manage Add-ons > Enable or Disable Add-ons. The QuickTime object was listed (twice) and its status was "Enabled". The Behavior object was also listed and its status was "Enabled". All three were ActiveX Controls and all had "QTPlugin.ocx" in the File column.

I logged in as an administrator, checked Tools > Manage Add-ons > Enable or Disable Add-ons in IE7, and found everything was identical.

Of course, just because IE shows them as enabled does not mean that they are necessarily working properly. I'll look into those a bit more to see if I can find anything out.

Dec 15, 2009 7:35 AM in response to hw_wc

I still have not found a solution to this problem, though I do have more information about it.

Today I logged on to a computer with a non-admin account and tried to view embedded videos. The videos still did not work (only got the QuickTime logo with a question mark over it).

I then changed that account and made it a member of the Administrators group on the computer. Logged into that account again and tried viewing the embedded videos. This time it worked just fine.

I changed the account again, this time moving back to the Users group, which is the group it had been in before. Logged in again and tried viewing the embedded videos. Once again, all I got was the the QuickTime logo with a question mark over it.

So, at the very least I know it is a permissions issue of some sort. I just have to figure out what exactly it is that needs to have additional access for the "Users" group and hope it is something that I can grant those permissions to without causing a security loophole.

Dec 15, 2009 10:13 AM in response to hw_wc

I think I have figured out the general cause of the problem. I think it was caused by a registry hack that was put into the NTUSER.DAT that exists in the "Default User" profile. I just don't know yet which registry hack it was (we've added quite a few through the last couple of years).

The way I came to this conlclusion was to remove the NTUSER.DAT file from "C:\Documents and Settings\Default User". I then logged on with multiple non-admin accounts (which had never been used to log on to that computer before). In all cases the embedded videos worked perfectly.

Luckily, we have documented all the registry hacks we added into the "Default User" NTUSER.DAT file. I'm going to start adding them back in one at a time to try to figure out which one caused QuickTime embedded videos to stop working. If I find out which registry setting it was that caused this, I'll post it in this thread in case anybody else runs into the same problem.

Dec 15, 2009 10:22 AM in response to hw_wc

Great catch, hw!

Luckily, we have documented all the registry hacks we added into the "Default User" NTUSER.DAT file. I'm going to start adding them back in one at a time to try to figure out which one caused QuickTime embedded videos to stop working. If I find out which registry setting it was that caused this, I'll post it in this thread in case anybody else runs into the same problem.


Thank you very much. There's quite a few reports of trouble with the plugins that don't respond to usual treatments, so a heads-up on a potential registry issue might be very helpful indeed.

Dec 15, 2009 12:03 PM in response to hw_wc

Problem has been fixed. It turns out it wasn't one of our registry hacks that caused the problem. It was, however, a problem in the registry that caused this issue.

"HKEY CURRENTUSER\Software\Apple Computer,Inc.\QuickTime\LocalUserPreferences" has a REG_SZ value called "FolderPath". In the NTUSER.DAT file for the "Default User", this value had been set to "C:\Documents and Settings\Administrator\Local Settings\Application Data\Apple Computer\QuickTime\".

The problem was created by the fact that non-admin accounts cannot see what is in that folder and admin accounts can. When we installed QuickTime using a non-admin account, that key would be updated in that account and pointed to that user's profile folder instead of "Administrator".

I edited the NTUSER.DAT file for "Default User" and deleted the value data in "FolderPath". Logged in as a user who had never been logged in to the computer. Went to the web site and opened a page with an embedded QuickTime video. The video played with no problems.

Just to be sure, I removed the profiles of a couple of acounts that I had previously logged onto the computer with and been unable to play embedded videos. After they were removed, I logged back in and the embedded videos now played for those accounts.

So, now I have a fix and now I'll just have to apply it to all the computers.

Non-admins cannot view embedded QuickTime videos

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.