Not allow user to install programs.

[Erich]

I am running XP pro at home. I have it setup to where I have an
administrator account and my wife is a limited account. She is VERY computer
illiterate so I don't want her inadvertently screwing up the system as I
need the computer for work purposes. I basically don't want her to be able
to do ANYTHING except be able to surf the web and check her email which is
all she uses the computer for anyway. She can also use Word or something
like that, but that's the extent of it. I do not want her installing any
programs or doing anything else to the system. Even though I gave her a
limited account, she can still install programs and do a ton of other
dangerous things. What is the best way (group policy editor?) to lock her
completely down but not affect my administrator account? THANKS

 

[Carey Frisch [MVP]]

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------------------

:

| I am running XP pro at home. I have it setup to where I have an
| administrator account and my wife is a limited account. She is VERY computer
| illiterate so I don't want her inadvertently screwing up the system as I
| need the computer for work purposes. I basically don't want her to be able
| to do ANYTHING except be able to surf the web and check her email which is
| all she uses the computer for anyway. She can also use Word or something
| like that, but that's the extent of it. I do not want her installing any
| programs or doing anything else to the system. Even though I gave her a
| limited account, she can still install programs and do a ton of other
| dangerous things. What is the best way (group policy editor?) to lock her
| completely down but not affect my administrator account? THANKS

 

[Matthew Mucker [MSFT]]

How do you define "install a program"?

Many programs don't have any "installation" requirements. Just copy the
.exe file locally and run it. For programs like that, there's not a
practical way to prevent your wife from running them.

The good news is, that if your wife is a limited user, she can damage her
own profile but not the system as a whole. Limited users can't write to the
Program Files folder, can't write to the Windows folder, and can't write to
the HKLM hive of the registry.

So programs that require writing to these areas, your wife won't be able to
install.

-Matt

===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------