Re: securing files in a public PC

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 01/23/05

  • Next message: Lanwench [MVP - Exchange]: "Re: Windows Client and Server Security" 
    Date: Sun, 23 Jan 2005 11:04:41 -0500

    Steven L Umbach wrote:
    > In Windows 2000 the guest account does not have a permanent profile
    > and you can give the guest account a password and configure the
    > account so that the password can not be changed other than by an
    > administrator. The guest account by default would not be able to
    > delete or write any permanent files on the computer as long as you
    > double check that everyone/users have no more than read/list/execute
    > permissions for the root /drive folder and to the all
    > users/application data folder and subfolders. Of course enabling the
    > guest account will allow network access to shares on the computer
    > that have permissions for guests/guest/everyone user/groups. Group
    > Policy [gpedit.msc] does only hide a lot of things and ultimately you
    > need to rely on permissions. On a stand alone computer by default
    > Group Policy settings will apply to all users. Be sure to check out
    > all the settings under user configuration/administrative templates.
    > --- Steve

    Just wondering - would a mandatory profile help?
    Also, there's got to be plenty of "internet cafe" software that can help
    with this stuff....
    >
    >
    > "Jell" <jell@a.com> wrote in message
    > news:F9_Hd.10410$Vx2.2007@trndny01...
    >> I'm installing a Win2k computer with a kiosk software in my
    >> restaurant and I want to allow only printing. The kiosk handles IE
    >> pretty well security wise but when opening Word docs from the
    >> browser I leave my Windows files wide open for deletion. I also do
    >> not want to allow saving to the hard drive. I looked into securing
    >> the computer using security permissions but got in way over my head.
    >> I investigated software that 'hides' files and folders but none
    >> panned out as effective because they mainly focus on hiding things
    >> like the My Documents folder which to me is the least of my
    >> concerns. I know all the registry hacks to hide desktop items,
    >> Control panel, etc...
    >> Does anyone have a solution that is reasonably simple?
    >>
    >> thanks

  • Next message: Lanwench [MVP - Exchange]: "Re: Windows Client and Server Security"

    Relevant Pages

    • Re: Accessing xp folder from 98
      ... The guest account is enabled. ... Using the guest account for network ... >> When sharing a disk or folder, I sometimes get this message: ... >> accessed by computers running Windows 98SE, Windows Millenium Edition, ...
      (microsoft.public.windowsxp.network_web)
    • Re: Password protecting/encrypting files & folders
      ... I have Windows XP home and have the NTFS file system. ... Do not use the Guest account. ... folder and set permissions for access to the users/groups you want. ... You still should not be using the Guest Account. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Accessing xp folder from 98
      ... Using the guest account for network access ... When sharing a disk or folder, I sometimes get this message: ... accessed by computers running Windows 98SE, Windows Millenium Edition, ...
      (microsoft.public.windowsxp.network_web)
    • Re: Directory Permissions - What gives?
      ... OK I can agree with that and "I stand corrected" on the guest account. ... Authenticated Users groups. ... If you had the parent folder shared at Everyone=FULL or even better ... permissions from the parent folder and add Group B and have inheritance ...
      (microsoft.public.windows.server.general)
    • Re: Another way to add passwords to simple network shares
      ... > password to a shared folder. ... > command "net user guest password" and close the command window. ... > enables a password on the Guest account. ... > Your file shares will now be protected by the Guest password. ...
      (microsoft.public.windowsxp.security_admin)