Limiting below "all users"

[Mike]

I want to set up a user account with fewer options than
available to a member of the "Users" group. It is coming
together well, but I'm trying to find a way to remove
things from that user's start menu while still keeping
the convienient "All Users" start menu as it is in
Windows XP Pro.
Thanks
mike

 

[Todd Shillam]

Mike,

The 'All Users' group under <C:\Documents and Settings> gets applied to all
local user profiles on the machine--hence, all shortcuts and start-menu
items in the 'All Users' profile will be 'pushed' the everyone. I would
suggest creating a 'default' arrangment in the 'Default User' group (it's
hidden under the same directory). In other words, take all the desktop
shortcuts, etc. out from the 'All Users' group and place them under 'Default
User'. Now any time a new user gets created, it copies the settings from
the 'Default User' profile--then you can adjust each local user profile as
you see fit.

Best regards,

Todd

I want to set up a user account with fewer options than
available to a member of the "Users" group. It is coming
together well, but I'm trying to find a way to remove
things from that user's start menu while still keeping
the convienient "All Users" start menu as it is in
Windows XP Pro.
Thanks
mike

 

[Kevin K]

Hi Mike,

Remove Common Program Groups from Start Menu (All Windows):
http://www.winguides.com/registry/display.php/158/

For more registry tweaks visit:
http://www.winguides.com/registry/

 

[Roger Abell]

The main issue you must deal with is that All Users is
just that, all of them.
You could try defining a directory, such as
c:\config\SomeUsers
and place in here shortcuts that you want available to
on SomeUsers. You could define a custom group
SomeUsers and make the desired accounts members,
and then modify the NTFS permissions of the folder
c:\config\SomeUsers so that Users group does not have
a permission grant but the SomeUsers group does.
Then, drag and drop a shortcut to this folder into the
All Users profile. All accounts will have permission
on the shortcut, but if they try to use it only those in the
SomeUsers group will be able to and others will be denied.

 

[Star Fleet Admiral Q]

May I suggest trying to "Deny Access" to the "All Users" profile from the
profile you wish to setup without the "All Users" shortcuts. Just make a
mental note, when adding new software, any programs you want the "Limited
User" profile to access will have to have the shortcuts setup manually.