igodwin
cb0c5b4614
od-db-backup.md becomes od/db-backup.md -- the hyphen becomes a slash, so the fetch command is exactly as long to type as before. That mattered: the length of a hand-typed command is the constraint this repo is organized around, and a reorganization that lengthened it would have been a net loss. Scripts deliberately stay flat in scripts/ with their domain prefix. Everything executable in one directory is the set worth reading before it runs, and nesting five files by domain would add characters without adding clarity. Updates every reference: README Contents (now grouped by directory), the layout section, both fetch examples, inter-runbook links, and the .NOTES headers in all five scripts. Verified every markdown link resolves on disk and that Contents and the filesystem agree in both directions. Records the naming rule in CONTRIBUTING so the next file lands correctly. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HwcG1jLs1T425QRMxtjxP7
82 lines
4.3 KiB
Markdown
82 lines
4.3 KiB
Markdown
# Runbook: Open Dental — Persist "Do not show this window on startup"
|
|
|
|
> For qualified IT professionals, on systems they are authorized to administer.
|
|
> Provided as-is, without warranty — verify it fits your environment. See LICENSE.
|
|
|
|
**Applies to:** Windows workstation where Open Dental is run by a standard (non-admin) user.
|
|
**Symptom:** The **Choose Database** window appears on every launch even though **"Do not show this window on startup (this computer only)"** is checked. The checkbox appears to take but does not survive a restart.
|
|
**Root cause:** The setting is stored in `FreeDentalConfig.xml` in the Open Dental install directory. Standard users lack write permission to that directory, so the change is never saved. Per Open Dental's docs, saving this window's settings requires the process to write that file.
|
|
|
|
**Placeholders:**
|
|
|
|
| Placeholder | Meaning |
|
|
|---|---|
|
|
| `<OD_INSTALL_DIR>` | Open Dental install directory (holds `FreeDentalConfig.xml`) — commonly under `Program Files` or `Program Files (x86)`; varies by version/architecture |
|
|
|
|
---
|
|
|
|
## 1. Confirm the symptom
|
|
|
|
Launch Open Dental **as the standard user who normally runs it**. Check **"Do not show this window on startup (this computer only)"**, click **OK**, then fully close and relaunch.
|
|
|
|
- Window returns → the config file isn't being saved → continue.
|
|
- Window gone → nothing to do.
|
|
|
|
## 2. Choose the fix
|
|
|
|
| Situation | Use |
|
|
|---|---|
|
|
| One-off machine, or the daily user is already a local admin | **Option A** — one-time elevated save |
|
|
| Shared workstation, or the daily user is a standard (non-admin) user | **Option B** — persistent ACL grant *(preferred)* |
|
|
|
|
Option A saves the setting once under an elevated context. Option B makes the file writable under the normal user context so Open Dental can rewrite it itself, now and after future changes — the durable fix for standard-user machines.
|
|
|
|
## 3. Option A — One-time elevated save
|
|
|
|
1. Right-click the Open Dental shortcut → **Run as administrator**.
|
|
2. Re-check **"Do not show this window on startup (this computer only)."**
|
|
3. Click **OK**, then close Open Dental.
|
|
4. Relaunch **as the standard user** and confirm the window no longer appears.
|
|
|
|
> Because the elevated process could write the install directory, the setting saves. If the standard user later triggers another change to this window, it won't persist — for shared/standard-user machines prefer Option B.
|
|
|
|
## 4. Option B — Persistent ACL grant (preferred)
|
|
|
|
Grant the built-in **Users** group **Modify** on `FreeDentalConfig.xml` so Open Dental can rewrite it under the normal user context without elevation.
|
|
|
|
Fastest, from an **elevated** PowerShell:
|
|
|
|
```
|
|
irm rb.godwinsystems.com/scripts/od-cfg-acl.ps1 | iex
|
|
```
|
|
|
|
It resolves the install path (64-bit / 32-bit Program Files), confirms, and grants the permission.
|
|
|
|
Offline / manual equivalent (elevated PowerShell or Command Prompt) — grant Modify to Users via the well-known SID, not the localized name "Users":
|
|
|
|
```
|
|
icacls "<OD_INSTALL_DIR>\FreeDentalConfig.xml" /grant *S-1-5-32-545:M
|
|
```
|
|
|
|
> `S-1-5-32-545` is the built-in **Users** group on every Windows install regardless of OS language — safer in scripts than the display name "Users," which is localized. `:M` = Modify.
|
|
|
|
## 5. Verify
|
|
|
|
Relaunch Open Dental **as the standard user**. Confirm the **Choose Database** window no longer appears on startup.
|
|
|
|
If it still appears: confirm the ACL landed with `icacls "<OD_INSTALL_DIR>\FreeDentalConfig.xml"` (look for a `Users:(M)`-style entry), and confirm you edited the copy in the directory Open Dental actually launches from.
|
|
|
|
---
|
|
|
|
## Security note
|
|
|
|
On **direct-connection** setups, `FreeDentalConfig.xml` stores the MySQL password **obfuscated but reversible**. Granting the Users group write access does not change that exposure — but widening read/write on a file that holds DB credentials is worth calling out.
|
|
|
|
- Use a **limited MySQL user** (scoped to the Open Dental database) for workstation connections rather than `root`.
|
|
- Longer-term, move to **Middle Tier**, which removes per-workstation DB credentials entirely (workstations talk to a service, not the database directly).
|
|
|
|
## References
|
|
|
|
- Open Dental manual — FreeDentalConfig.xml: <https://www.opendental.com/manual/freedentalconfig.html>
|
|
- Open Dental manual — Choose Database window: <https://www.opendental.com/manual/choosedatabase.html>
|