Restrict user Access

[Guest]

I had someone ask me how to do this on Win 2000 and felt like I was brain
dead. It's so not intuitive like XP. What they want to do is have only the
administrator be able to use email (outlook) and get on the internet. And
they don't want other users to be able to view each other's files when
they're logged in. In XP, you just click, keep my files private - done. Can
someone point me to some info on how to do this in Win 2000 - I can't
remember or find it.

When I logged in as one of the "restricted" users and told it not to allow
IE or Ourlook or told it to disable the LAN, it did that for EVERYONE. What's
the point of profiles if you can't do different things for different profiles?

Can someone please refresh my memory as to how this works in 2000.

Thanks,
Dawn

 

[Frank Booth Snr]

I had someone ask me how to do this on Win 2000 and felt like I was brain
dead. It's so not intuitive like XP. What they want to do is have only the
administrator be able to use email (outlook) and get on the internet. And
they don't want other users to be able to view each other's files when
they're logged in. In XP, you just click, keep my files private - done. Can
someone point me to some info on how to do this in Win 2000 - I can't
remember or find it.

When I logged in as one of the "restricted" users and told it not to allow
IE or Ourlook or told it to disable the LAN, it did that for EVERYONE. What's
the point of profiles if you can't do different things for different profiles?

Can someone please refresh my memory as to how this works in 2000.

First log on as an Administrator. A Restricted user should not be
allowed to alter permissions on programs. To change this is a little
involved. Go to the Program Files folder, right click and then click
Security tab. Uncheck 'Allow inherited properties from parent...'.
Then Remove all categories and Add back Administrator and Users. Apply
then go to 'Advanced' and check 'Reset permissions on child objects...'
and apply. 'Allow inherited properties from parent...' should remain
unchecked.

As far as Outlook and IE are concerned find Internet Explorer folder.
Right click the folder then click security tab. Remove 'Users' category
leaving Administrators. Make sure 'Full Control permission' is checked,
then apply. Do the same for Outlook/Outlook Express Folder.
Administrators will now only be able to use the internet.

To restrict access of a user's files to that user alone go to Documents
and Settings. Right click on the user's folder and uncheck 'Allow
inherted properties from parent...'. Then Add back that user's profile
name from the user list. Make sure 'Full Control permission' is checked.
Click Advanced then check 'Reset permissions on child objects...'
ensuring that 'inherited parent permissions'option stays unchecked.
Repeat procedure for each user.

 

[EM]

You have to login as an Administrator.
Right click on the executable for each program you want to be controlled by
the Admin and select properties/security,and uncheck the box that says allow
inheritable permissions from parent to propogate to the object
When the dialog box pops up that says copy,remove, or cancel. click copy.
Then select everybody and click remove

A Little Bit of Everything..
http://www.whaatsoever.com