Software and Desktop Restrictions

  • Thread starter Thread starter John
  • Start date Start date
J

John

Does anyone know how to (or know the link to some MS
whitepapers) control what local users see after logging
in? I do not have a server setup and everyone is logging
into the same computer. I am trying to minimize the risk
of my roomates messing up the computer. Ideally I would
like to control exactly what they see on the Start menu
and desktop. I would also like to limit what directories
they can see on the hard drive. Please help me if you
can, it would be greatly appriciated.
 
See www.dougknox.com, Win XP Utilities, Windows XP Security Console for a
small utility that will allow you to put in restrictions on features, on a
per user basis.

Then you need to investigate file and folder security.

To do this, you must be running NTFS as your file system on the drive in
question. If your hard disk/partition is not NTFS you will need to convert
it. To do this, open a Command Prompt window and enter the following
command:

CONVERT X: /FS:NTFS

Where X: is the drive letter you wish to convert. You may also want to see
http://www.aumha.org/a/ntfscvt.htm to ensure that you're getting the optimal
conversion.

After this step is completed and you've rebooted the computer, if necessary:

XP PRO: In Windows Explorer, go to Tools, Folder Options, View and uncheck
Use Simple File Sharing. Now, when you right click on a drive, folder or
file (on an NTFS partition) and select Properties, you'll see a Security
tab. Here you can assign or deny permissions based on user name or user
group membership.

XP Home: By default, you can only make files and folders under My Documents
"private". This is done by right clicking a folder or file and selecting
Properties, Sharing. To change the permissions on other folders, you need
to boot the computer to Safe Mode and log in on the built in Administrator
account. In this mode, you'll see the Security tab in Properties, and you
can assign permissions based on user name or group membership.

How Do I Get the Security Tab in Properties - XP Home (makes the Security
tab appear outside of Safe Mode)
http://www.dougknox.com, Win XP Tips section

HOW TO: Set, View, Change, or Remove File and Folder Permissions in Windows
XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

HOW TO: Set, View, Change, or Remove Special Permissions for Files and
Folders
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419

HOW TO: Disable Simplified Sharing and Password-Protect a Shared Folder in
Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;307874
 
The easiest way to tie down your desktop is by
implementing Local Group Policies. Type gpedit.msc from
the Run dialog box.
 
Back
Top