Keeping other users away from my apps

  • Thread starter Thread starter Vance Roos
  • Start date Start date
V

Vance Roos

I am using XP Pro on NTFS and I am system administrator. While
logged on as sys admin I installed several programs.

I have recently created a user account. I now notice that the user
can access most of the applications which I installed as
administrator.

I have two questions.

(1) Is there a way to limit ordinary user access to some of these
programs, such as thid party system utilities, installed as
administrator?

---

Furthermore some of these programs, like my emailler Eudora, use
separate data folders for each user.

(2) How can I allow a user to access a program like Eudora but at
the same time keep the user away from my own personal data associated
with that program?

Is the only way to do this to put my oen personal data folders
somewhere in the folder C:\Documents and Settings\Administrator ?

I would actually prefer to limit user access to any folder which I
have created as administrator even if it is in something like
C:\MY_DATA. Can I do this?
 
Vance said:
I am using XP Pro on NTFS and I am system administrator. While
logged on as sys admin I installed several programs.

I have recently created a user account. I now notice that the user
can access most of the applications which I installed as
administrator.

I have two questions.

(1) Is there a way to limit ordinary user access to some of these
programs, such as thid party system utilities, installed as
administrator?
Click to expand...

Yes. By default all users can execute programs after they are properly
installed. If your other users aren't too clever you can simply remove
the shortcuts for the programs from the All Users start menu and put them
on your start menu. Or you can set security on the program executables.
By default in XP simple file sharing is turned off. To turn it on, in
explorer select Tools, Folder Options and go to the View tab. Scroll down
in the list of advanced settings, remove the check from "use simple file
sharing..." and click Apply. Then find the executable of the program that
you want to limit access. Right click on the exe and select Properties.
Go to the security tab and modify the security to fit your needs, probably
all that will be needed is to leave the Administrators and SYSTEM group
and remove the Users group from access.
Furthermore some of these programs, like my emailler Eudora, use
separate data folders for each user.

(2) How can I allow a user to access a program like Eudora but at
the same time keep the user away from my own personal data associated
with that program?

Is the only way to do this to put my oen personal data folders
somewhere in the folder C:\Documents and Settings\Administrator ?

I would actually prefer to limit user access to any folder which I
have created as administrator even if it is in something like
C:\MY_DATA. Can I do this?
Click to expand...

One way certainly is to place the files in the profile directory, since
that can be secured easily through user settings in the control panel.
However with NTFS and simple file sharing turned off, you can use the
folder properties to control access permissions as well. As above with
the executable, right click on the folder and select properties. Modify
the security permissions for the folder on the security tab.
--
Tom Porterfield
MS-MVP Windows XP & Smart Display
http://mywebpages.comcast.net/tp.porterfield/support

Please post all follow-ups to the newsgroup only.
 
Tom Porterfield said:
Yes. By default all users can execute programs after they are
properly installed. If your other users aren't too clever you
can simply remove the shortcuts for the programs from the All
Users start menu and put them on your start menu. Or you can
set security on the program executables. By default in XP simple
file sharing is turned off. To turn it on, in explorer select
Tools, Folder Options and go to the View tab. Scroll down in
the list of advanced settings, remove the check from "use simple
file sharing..." and click Apply. Then find the executable of
the program that you want to limit access. Right click on the
exe and select Properties. Go to the security tab and modify the
security to fit your needs, probably all that will be needed is
to leave the Administrators and SYSTEM group and remove the
Users group from access.
Click to expand...

Thank you for a useful answer.

Is there any way I can limit access to data which is stored on
another drive which is in FAT32?

In my case, my Eudora email data is on the D: drive and that is in
FAT32. I would like to prevent anyone general user of my WinXP
system from accessing it.

Can this be done?
 
If you search XP's Help for "FAT32" you'll find some good articles. One
in particular says "In order to maintain access control on files and
folders and support limited accounts, you must use NTFS. If you use
FAT32, all users will have access to all files on your hard drive,
regardless of their account type (administrator, limited, or standard.)"

You might want to now read about "System Administatration" as this any
many other things that you are interested in are discussed there.
 
Back
Top