User Rights

[Dave Marden]

Is there any way to give different groups different user
rights? I have been trying to do this with Resultant Set
of Policy but am not having any luck. I would like to
make it so different groups get to use different
programs. My main thing I want to do this for is that I
play online poker and would like to set up my computer so
that people that are users can not use this program.
Also I would like to know if there is any way to put a
password on one particular folder that has all my
password in it.

Thanks,
Dave Marden

 

[Steven L Umbach]

First, there is a distinction between user rights and permissions. Permissions are
used to grant a user access to a resources such as files and printers via ntfs,
registry, or file permissions, etc. User rights grant a user the ability to perform
a task such as logon, change system time, configure a network connection, install
driver, etc.

Restricting the running of applications can be done by denying [no permission is an
implicit deny] users/groups the appropriate ntfs permissions to the folder/executable
for the application. A user would need read/list/execute permissions to run an
application. Find the folder for the application you want to restrict and remove the
users/everyone group leaving only the users/group that you want to be able to run the
application. Do not remove "system" if it is present. XP Pro also offers software
Restriction Policies that can effectively restrict what users can run on a computer
based on path/hash/certificate rule, however on a non domain computer the
restrictions will apply to all users except local administrators if the enforcement
rule exempts them. --- Steve

http://support.microsoft.com/?kbid=310791
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418