Program Access restriction to Users ??

[Guest]

Hi,

This the first time I've posted, so apologies if this has been answered
somewhere else.

I want to set up multiple user accounts/passwords (which I'm ok with) but
want to restrict what programs/applets they can run (with me as administrator
still having full control)....... in particular the Control Panel "Regional
settings" and "Time and date settings".

I've trawled the Help & Support section but can't see anything obvious that
works...... please can one of you kind folk point me in the right direction.

Cheers,

Paul

 

[Steven L Umbach]

The Shared Computer Toolkit should be able to do most if not all of what you
want. To restrict access to applications that users can run such as in the
program files folder remove the users from the NTFS permission list and
leave only the users that you want to have access with the minimum
permissions they need. You could also instead use Local Group Policy in XP
Pro as in gpedit.msc and configure restrictions under user
configurations/administrative templates. The problem with local Group Policy
is that it applies equally to all users though you can exempt users/groups
by giving them deny permissions to the \windows\system32\group policy\user
folder after you are done configuring local Group Policy. In XP Pro you can
also use Software Restriction Policies to manage access to applications. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418 --- how to
configure NTFS permissions
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- XP Pro SRP.

 

[Doug Knox MS-MVP]

See www.dougknox.com, Win XP Utilities, Windows XP Security Console

 

[Guest]

Thanks guys, I'll try all suggestions when I get back in the office on
Monday and will post to let you know the best solution.

Steve, I have already tried gpedit but I couldn't seem to make it have the
desired effect.

Cheers,

Paul