Multiple XP's with File Security

  • Thread starter Thread starter Carl Reining
  • Start date Start date
C

Carl Reining

Gidday,

I am running two XP systems on a partitioned FAT32 disk,
and want to protect one partition's XP OS and files from
the other. One system is for a teenager who downloads
freeware and messes up the config for the other system
which is intended form business and university studies and
need to be kept reliable.

Can anyone help with instructions, or where to go because
the microsoft documentation does not cover this.

Regards & Thanks
 
Carl said:
Gidday,

I am running two XP systems on a partitioned FAT32 disk,
and want to protect one partition's XP OS and files from
the other. One system is for a teenager who downloads
freeware and messes up the config for the other system
which is intended form business and university studies and
need to be kept reliable.

Can anyone help with instructions, or where to go because
the microsoft documentation does not cover this.

Regards & Thanks

FAT32 would have to be converted to NTFS in order to gain security on a
user/group level.

Start -> Help and Support
search for:

convert to NTFS

You'll find this in the built in help.
---------------
To convert a volume to NTFS from the command prompt
1. Open Command Prompt.
2. In the command prompt window, type
3. convert drive_letter: /fs:ntfs

For example, typing convert D: /fs:ntfs would format drive D: with the ntfs
format.

Notes

- To open command prompt, click Start, point to Programs, point to
Accessories, and then click Command Prompt.
- You can convert FAT or FAT32 volumes to NTFS with this command.
---------------

As well as an entry TRULY detailing the "convert" command.

Also a search on the Microsoft web page or using google brings up:
HOW TO: Convert a FAT16 or FAT32 Volume to NTFS in Windows XP
http://support.microsoft.com/?kbid=307881


If you then search the built in help and support for:

file and folder permissions

You will find such articles as "To set, view, change, or remove file and
folder permissions" and "To set, view, change, or remove special permissions
for files and folders" and better yet, articles such as "Permissions" and
"Best Practices: Access Control".

Seperate users will not keep the one who downloads freeware and crap from
doing so.. Make that account a limited user.. Or just a USER so they cannot
install it.. Or get ready for a never-ending battle with Spyware/Trojans and
such with your Antivirus software and lots of Spyware/Adware removal tools.
 
Greetings --

FAT32 has _no_ security capabilities, so you'll need to convert to
NTFS before proceeding.

You can safely convert your hard drive to NTFS whenever desired,
without having to format the partition and reinstall everything. As
always when performing any serious changes, back up any important data
before proceeding, just in case. A little advance preparation is also
strongly recommended, so you can avoid any performance hits caused by
the default cluster size:

Converting FAT32 to NTFS in Windows
http://www.aumha.org/a/ntfscvt.htm

WinXP's file security paradigm uses the method of explicitly
assigning file/folder permissions to individual users and/or groups.

HOW TO Create and Configure User Accounts in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;279783

HOW TO Set, View, Change, or Remove File and Folder Permissions
http://support.microsoft.com/default.aspx?scid=kb;en-us;q308418

HOW TO Set, View, Change, or Remove Special Permissions for Files and
Folders
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q308419

HOW TO Set the My Documents Folder as Private in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;298399

Of course, if you have WinXP Pro, you can encrypt the desired
files/folders.

Best Practices for Encrypting File System
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

As a work-around, you can place the file in a compressed folder,
and set a password to uncompress the folder to view/access its
contents.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
After converting to NTFS, accomplishing your objective is
not exactly simple, but can be accomplished.
This issue is that the filesystem will have permissions all
across it granting things to the well-known accounts/groups,
like Users. These are recognized by both OS installs.

If this is to be your first exercise in the use of NTFS permissions
then you have selected one that will take you on a tour of a majority
of aspects of NTFS.

Post back if you are serious in accomplishing your objective.
 
After converting to NTFS, accomplishing your objective is
not exactly simple, but can be accomplished.
This issue is that the filesystem will have permissions all
across it granting things to the well-known accounts/groups,
like Users. These are recognized by both OS installs.

If this is to be your first exercise in the use of NTFS permissions
then you have selected one that will take you on a tour of a majority
of aspects of NTFS.

Post back if you are serious in accomplishing your objective.

I agree that this would be a major undertaking, but with care, you should
be able to do it safely. Back up your important data asap, even before you
make a decision regarding this project.
 
After using the recovery cd to re-install windows xp, I noticed that the system was giving us some kind of problems. Being too slow, failure to synchronize some of the files,splitting the program in two. I don't know if somebody was hacking my computer. I feel unsafe accesing my computer and doing some paper work, accessing my bank account and so forth. How do I go about deleting the other branch of windows xp? Please give me some feedback on these issues. Thank you very much for all your help.
 
superlady2003 said:
After using the recovery cd to re-install windows xp, I noticed that
the system was giving us some kind of problems. Being too slow,
failure to synchronize some of the files,splitting the program in
two. I don't know if somebody was hacking my computer. I feel
unsafe accesing my computer and doing some paper work, accessing my
bank account and so forth. How do I go about deleting the other
branch of windows xp? Please give me some feedback on these issues.
Thank you very much for all your help.


After you reinstalled, did you immediately turn on the firewall (before
connecting to the Internet in any fashion) and then connect to the Internet
and download all critical patches?

If not (even if so) try doing this list of things..

Although some people complain about this "long list" of things I give, if
you do these things (some periodically) then I truly believe (because I see
it every day from others I have suggested it to) that you can keep your
machine spyware/adware/malware/virus/trojan free and running much better
than it likely does by the time you ask this question on a newsgroup like
this one.

So, that being said, here is the list:

Turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
(It has been reported that it now works with AOL 9.0+)


Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

Spybot Search and Destroy
http://www.safer-networking.net/

Lavasoft AdAware
http://www.lavasoft.de

CWSShredder
http://www.spywareinfo.com/~merijn/downloads.html

Hijack This!
http://mjc1.com/mirror/hjt/

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
- http://www.moosoft.com/
- http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. I like SpywareGuard for those with enough processor
to have something running like antivirus software - and it prevents browser
hijacking quite well.


And Assortment of Others:
http://www.merijn.org/downloads.html


After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW! Grisoft AntiVirus:
http://www.grisoft.com/us/us_dwnl_free.php


Empty your Temporary Internet Files and shrink the size it stores to about
80 to 120MB (seems to be an optimal size for the normal user)

- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section,
do the following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the
"Amount of disk space to use:" to something between 80MB
and 120MB. (Betting it is MUCH larger right now.)
- Click OK.
- Click on "Delete Files" and select to
"Delete all offline contents" (the checkbox) and click
OK. (If you had a LOT, this could take 2-10 minutes or
more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.


Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://spambayes.sourceforge.net
or
Spamihilator.
http://www.spamihilator.com
 
Back
Top