How to lock users out of sensitive areas?

  • Thread starter Thread starter Fr4nk
  • Start date Start date
F

Fr4nk

I work for a hire company who, as part of our buisness,
hire out XP Pro-based systems for use with Avid TV and
film postproduction software.

One problem is each time we get a system back from a
client we find that a whole host of setting have been
changed and folders moved. This then takes up too much
time to put right again.

My knowledge is all based around Avid software and not the
Windows OS (we have always used Macs but have just bought
a bunch of PCs), so I am a bit lost with this prob.

All the client needs to do is use a couple of apps and
tinker with one or two folders but be denied access to
anything else.

Could anyone help me with this? If any advice could be as
detailed as poss, that would be great.

Thanks in advance.
 
First, read the articles in XP help about "System Admininstration".
Then setup user id's for your users, and you. Give the customers a
"restricted user" privileges. Give them the password to log in for this
special account.

DO NOT give them your iD and password, nor the administrator's password.

After you read these articles, you'll know how to setup permissions,
maybe even setup a group called "customers" which have permission to
only run the apps you want, and access the folders you want.

Hope this is useful to you. Let us know.

rms
 
Rob Schneider said:
First, read the articles in XP help about "System Admininstration".
...
Click to expand...
What "System Admininstration" are you referring to? XP on-disk Help comes
up with a zero find on that phrase.
Or are you referring to a group online?

Pop
 
I think you need to do a choose Security and administration in Help & Support and not search for System Admininstratio
 
Greetings gentlemen:

By means of the Group Editor you can remove access to practically
every part of the computer and most of the programs, the following are
directives which you can enable to remove access to programs for regular
users, not so for administrators so do not give administrative paswords to
your customers\users.

Start Button\Run\gpedit.msc\user configuration\administrative
templates\system\run only allowed windows applications\double click\add\type
applications executable files\(example: Excel.exe, Winword.exe, Poledit.exe,
Powerpnt.exe, Explorer.exe)

You also must disable the following processes trough wich applications can
be
executed:
1) Command Prompt; = in System folder enable directive "Do not allow access
to command prompt"..
2) Helpcenter; = in System folder enable directive "Do not allow theese
programs to execute from helpcenter" add\program's executable file (add all
programs you wish to disable for regular users).
3) Taskmanager; = in System\Ctrl+Alt+Del Options subfolder enable directive
"Remove Taskmanager"
4) Start Menu\Run Command; = in start menu and taskbar folder enable
directive "Remove Run from the Start Menu"

Hope this helps...


--------------------Original Message---------------------------
 
Back
Top