Help Setting Up User Accounts

[JD]

We've always used the default Owner account, without a password. We boot
directly to our Desktop.
We've had problems with friends and relatives using the computer. Recenly
visiting relatives installed five new software programs in five days!
I'm thinking of putting a password on our Owner account and making the
"Guest User" account available. I'm not exactly sure how to do this, or
whether it will be sufficient. Or is a "limited" user account preferable?
I've read that limited users can change their own passwords. If that's the
case, then I would have to log each guest on myself, or tell them the
password. I understand that the Guest User account does not require a
password, but just how "limited" is that user's access to system
settings--or our own personal data files?
I'd like the guest user to be able to create, print, and save documents, and
access the Internet. But NOT be able to access Outlook Express, Regedit, any
of the maintenance applets (essentially, the Control Panel)--and definitely
not to download or install any software.
Sometimes the guest users are children, and I think it would be a good idea
to set the IE security level to HIGH. How can this be done so that it only
applies to the Guest (or limited) account and not to the Owner account?

 

[Hot-text]

START>
Control Panel>
User Accounts>
Change an account>
Guest>
Turn on the guest account>

Now!
Change the way user log on or off>
use Welcome screen (yes)
use Fast User Switching (yes)
Apply Options>

Now!!!
Or pick an account to change>
_Administrator>
Create a password>


That all it is OK!!!!!!!!!!

 

[JD]

I was really asking whether a limited user account would be safer than the
default guest user account, and how "limited" can I make it?

 

[Hot-text]

No But you can make it as safe as you can
For the Safest way is One PC one password one User.

 

[Anteaus]

A limited user should not be able to install programs provided that NTFS is
in use and permissions are at the defaults, however they can still do damage
of other sorts. If you wish to allow untrusted (and untrustworthy!) persons
to use the computer, an imaging system like Drive Image XML is the best
protection. Or, make a duplicate of the HD for their use, and put the
original back after they leave.

The ultimate protection in this respect is to use a bootable-CD OS such as
Knoppix or BartPE, and disconnect the HD.

Though personally if they had violated my trust already I would simply set a
BIOS password, padlock the case, and tell them to go buy one.

 

[JD]

Wow, this situation is more serious than I had thought. Maybe I should
borrow a line from Nancy Reagan and "Just say no!"