can i prevent a limited user from executing particular programs?

[Mike C]

would like to be able to prevent a limited user -- but
not other users -- from running a particular program
(AIM, for instance)-- but not other programs. how's that
done?

 

[@drian]

would like to be able to prevent a limited user -- but
not other users -- from running a particular program
(AIM, for instance)-- but not other programs. how's that
done?

You could try setting the security on the file, the "Read & Execute"
permission. So for example:

Set Read & Execute for User1, but remove that permission from User2. In
theory, it should not allow User2 to run <program>.exe.

@drian.

 

[Kelly]

Hi Mike,

Restrict Users from Running Specific Applications
http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict

Use Access Control to Restrict Who Can Use Files
http://www.microsoft.com/windowsxp/pro/using/howto/security/accesscontrol.asp


/top10faqs.htm

 

[Doug Knox MS-MVP]

See www.dougknox.com, Win XP Tips, Advanced Registry Editing for
instructions on how to load the user's portion of the Registry into REGEDIT
while you're actually logged on to your account.

Then go to the Registry key that you named in HKEY_USERS.

Example: HKEY_USERS\Kids1

Then continue down into this branch of the Registry until you get to:

HKEY_USERS\Kids1\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
(note this is only an example. Use the name you actually gave the Kids1 key)

In the right pane, right click in a blank area and select New, DWord value.
Name it DisallowRun. Then double click the value you just created and set
it to 1

Now, right click on the Explorer subkey in the left pane, select New, and
select Key. Name the new key DisallowRun. Highlight the key you just
created.

Right click in the right pane and select New, String value and name it 1
(that's the number one). Double click the new value you just created and
enter IEXPLORE.EXE

You can add more applications by incrementing the number of the value and
entering the name of the EXE file. MSIMN.EXE for Outlook Express, CALC.EXE
for Calculator and etc.

When you're finished, make sure you highlight HKEY_USERS\Kids1 (or whatever
you named it) and then click File, Unload Hive. Otherwise, an error will
occur when that user tries to log on to the computer.

If you have access to that user's desktop, then you don't need to use the
above technique. Simply log on to their account and run Regedit (assuming
they have the appropriate permissions). Instead of:

HKEY_USERS\Kids1\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Use:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explore
r

To put the restrictions in place.