User groups and permissions

[Guest]

Hi

I apologise for the long post, but I hope that by explaining my problem and requirements in detail I hope someone out there will be able to help!!

As a novice user of Windows XP Proffesional I am only aware of how to create either a user, or administrator accounts. Having checked into these neither one of them seems to suit my problem as administrator allows far too much access, and user is far too limiting!!

The problem is that my girlfriends teenagers decided that it was not fair to have security software on the pc, such as a pop up blocker, anti-virus, firewall and spyware hunter because they believe the it limits their access to the net so either keep deleting the security programs, but rather than uninstalling them, they delete the directories which seems to cause even more problems, or else they stop the programs running which then lets all the spyware back onto the PC!!!

Since I don't want to deny them access to the PC at times when I'm not there I would like to know if it is possible to create an account group similar to administrator, or user but that has the following abilities:

1. Disables access to control panel
2. Disables access to the system tray (so running prgrames can't be shut down)
3. Disables access to Taskmanager
4. Disables access to the Windows and other system directories
5. Allows them to install software
6. Does not allow them to uninstall anything
7. Allows them to run games which require admin rights
8. Disables access CD Writer
9. Disables access to ZIP drive
10. Does not allow them to access or change their account permissions

One idea I had was to partition the hard drive so that windows, office, and the security software is installed on one partition and that they have only got read access to this partition. Then they can use the other to have their games and other files on, but I still don't know how to set up security policies to do that. I have also ordered Norton Internet Security suite which I've been told has password protection which will prevent the firewall, pop-up blocker, and anti-virus programs being shutdown or uninstalled, however it would be nice to have that extra security that the above permissions would provide.

So can anyone out there please, please tell me what is possible and how to go about or do I just want the impossible!?

 

[Carey Frisch [MVP]]

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------------


| Hi
|
| I apologise for the long post, but I hope that by explaining my problem and requirements in detail I hope
someone out there will be able to help!!
|
| As a novice user of Windows XP Proffesional I am only aware of how to create either a user, or administrator
accounts. Having checked into these neither one of them seems to suit my problem as administrator allows far
too much access, and user is far too limiting!!
|
| The problem is that my girlfriends teenagers decided that it was not fair to have security software on the
pc, such as a pop up blocker, anti-virus, firewall and spyware hunter because they believe the it limits their
access to the net so either keep deleting the security programs, but rather than uninstalling them, they
delete the directories which seems to cause even more problems, or else they stop the programs running which
then lets all the spyware back onto the PC!!!
|
| Since I don't want to deny them access to the PC at times when I'm not there I would like to know if it is
possible to create an account group similar to administrator, or user but that has the following abilities:
|
| 1. Disables access to control panel
| 2. Disables access to the system tray (so running prgrames can't be shut down)
| 3. Disables access to Taskmanager
| 4. Disables access to the Windows and other system directories
| 5. Allows them to install software
| 6. Does not allow them to uninstall anything
| 7. Allows them to run games which require admin rights
| 8. Disables access CD Writer
| 9. Disables access to ZIP drive
| 10. Does not allow them to access or change their account permissions
|
| One idea I had was to partition the hard drive so that windows, office, and the security software is
installed on one partition and that they have only got read access to this partition. Then they can use the
other to have their games and other files on, but I still don't know how to set up security policies to do
that. I have also ordered Norton Internet Security suite which I've been told has password protection which
will prevent the firewall, pop-up blocker, and anti-virus programs being shutdown or uninstalled, however it
would be nice to have that extra security that the above permissions would provide.
|
| So can anyone out there please, please tell me what is possible and how to go about or do I just want the
impossible!?

 

[Rob Pelletier]

You mean, the "User Configuration" in the Group Policy console, is really
not a User configuration at all, but just more Computer Configuration?

I have been trying for two days to figure out how to apply so-called "User
Configuration" settings to a user (or group) and haven't been able to figure
it out. Is this because it can't be done?

Unbelievable!

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------- -------------------------


| Hi
|
| I apologise for the long post, but I hope that by explaining my problem

and requirements in detail I hope

someone out there will be able to help!!
|
| As a novice user of Windows XP Proffesional I am only aware of how to

create either a user, or administrator

accounts. Having checked into these neither one of them seems to suit my

problem as administrator allows far

too much access, and user is far too limiting!!
|
| The problem is that my girlfriends teenagers decided that it was not

fair to have security software on the

pc, such as a pop up blocker, anti-virus, firewall and spyware hunter

because they believe the it limits their

access to the net so either keep deleting the security programs, but

rather than uninstalling them, they

delete the directories which seems to cause even more problems, or else

they stop the programs running which

then lets all the spyware back onto the PC!!!
|
| Since I don't want to deny them access to the PC at times when I'm not

there I would like to know if it is

possible to create an account group similar to administrator, or user but

that has the following abilities:

|
| 1. Disables access to control panel
| 2. Disables access to the system tray (so running prgrames can't be shut down)
| 3. Disables access to Taskmanager
| 4. Disables access to the Windows and other system directories
| 5. Allows them to install software
| 6. Does not allow them to uninstall anything
| 7. Allows them to run games which require admin rights
| 8. Disables access CD Writer
| 9. Disables access to ZIP drive
| 10. Does not allow them to access or change their account permissions
|
| One idea I had was to partition the hard drive so that windows, office, and the security software is
installed on one partition and that they have only got read access to this

partition. Then they can use the

other to have their games and other files on, but I still don't know how

to set up security policies to do

that. I have also ordered Norton Internet Security suite which I've been

told has password protection which

will prevent the firewall, pop-up blocker, and anti-virus programs being

shutdown or uninstalled, however it

would be nice to have that extra security that the above permissions would provide.
|
| So can anyone out there please, please tell me what is possible and how

to go about or do I just want the