general security questions

  • Thread starter Thread starter Jon
  • Start date Start date
J

Jon

I have a long list of questions regarding security in XP
Pro, but I'll start with just one.

I have a home computer with XP Pro running on it. I would
like to set up an Admin account and four user accounts.
For the Admin, I would like to have full access to all
files/folders (no surprise). For each user, I would like
to prevent anyone from downloading, deleting, or
installing applications but still let them use the
applications. Furthermore, I would like to customize each
user profile so that some users have access to an
application while others don't. All the users are on the
local machine.

I'm sure this can be done. What is the best way?

Thanks for your help............Jon
 
According to this, "limited" users cannot:

"... Generally cannot install software or hardware, but
can access programs that have already been installed on
the computer. ..."

http://www.microsoft.com/resources/documentation/windows/xp
/all/proddocs/en-us/ua_c_account_types.mspx

As far as limiting what applications users can run, I'm
sure there's a way to create a custom account template
with an appropriate policy(ies), but that gets complicated
(IMO).

One method I can think of (assuming passwords and NTFS are
in place) is customizing the "C:\Documents and
Settings\All Users\Start Menu\Programs" and "C:\Documents
and Settings\%USERNAME%\Start Menu\Programs" folders. Of
course after each application install, you'd have to edit
the appropriate programs folder for each user. When the
application gets removed, then the users will have an
orphaned folder until it's deleted. Finally, any smart
user can just open Explorer, navigate to the "C:\Program
Files" folder and run the application from there.

Maybe someone else has a better idea. :)
 
Back
Top