Set up login to run two applications only

[Guest]

On my MCE PC, I want to set up a WatchTV user that only has access to MCE and
WMP. I don't want otherd to login as WatchTV, then surf the internet
downloading rogue viruses and such. Therefore, I need to block all other
applicaitons. I have set up the user to access only pertinant files, but I
can't find info on Allowing only certain apps.

Can someone direct me to instructions?
Thanks

 

[Steven L Umbach]

Ether use Software Restriction Policies if rhea computer is XP Pro to use
path and/or hash rules to specify what applications a user can execute and
then leave the default exemption for local administrators or configure NTFS
folder permissions so that the user has only access to the folders/files
he/she needs to run the application. You would then either have to remove
"users" from the folders you do not want them to have access to for
applications or add them to a group and give that group deny permissions to
the application folders you do not want them to run. Keep in mind that a
user may be able to access the internet through a URL shortcut in a document
even if they do not have permissions to run Internet Explorer.

Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- XP Pro Software Restriction Policies
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418 --- setting
folder permissions.
http://support.microsoft.com/default.aspx?scid=kb;en-us;323525 --- another
possibility if the user is not able to change executable name or copy the
same executeable with a different name to a folder they have write and
execute access for.