Re: securing files in a public PC

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 01/24/05 

Date: Mon, 24 Jan 2005 12:26:24 -0700

As I read it, the OP has already selected an "internet cafe"
software and is finding shortcomings in it. 

-- 
Roger
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:uA85xsWAFHA.2992@TK2MSFTNGP09.phx.gbl...
> Steven L Umbach wrote:
> > In Windows 2000 the guest account does not have a permanent profile
> > and you can give the guest account a password and configure the
> > account so that the password can not be changed other than by an
> > administrator. The guest account by default would not be able to
> > delete or write any permanent files on the computer as long as you
> > double check that everyone/users have no more than read/list/execute
> > permissions for the root /drive folder and to the all
> > users/application data folder and subfolders. Of course enabling the
> > guest account will allow network access to shares on the computer
> > that have permissions for guests/guest/everyone user/groups. Group
> > Policy [gpedit.msc] does only hide a lot of things and ultimately you
> > need to rely on permissions. On a stand alone computer by default
> > Group Policy settings will apply to all users. Be sure to check out
> > all the settings under user configuration/administrative templates.
> > --- Steve
>
> Just wondering - would a mandatory profile help?
> Also, there's got to be plenty of "internet cafe" software that can help
> with this stuff....
> >
> >
> > "Jell" <jell@a.com> wrote in message
> > news:F9_Hd.10410$Vx2.2007@trndny01...
> >> I'm installing a Win2k computer with a kiosk software in my
> >> restaurant and I want to allow only printing. The kiosk handles IE
> >> pretty well security wise but when opening Word docs from the
> >> browser I leave my Windows files wide open for deletion. I also do
> >> not want to allow saving to the hard drive. I looked into securing
> >> the computer using security permissions but got in way over my head.
> >> I investigated software that 'hides' files and folders but none
> >> panned out as effective because they mainly focus on hiding things
> >> like the My Documents folder which to me is the least of my
> >> concerns. I know all the registry hacks to hide desktop items,
> >> Control panel, etc...
> >> Does anyone have a solution that is reasonably simple?
> >>
> >> thanks
>
>

Relevant Pages

  • Re: Directory Permissions - What gives?
    ... OK I can agree with that and "I stand corrected" on the guest account. ... Authenticated Users groups. ... If you had the parent folder shared at Everyone=FULL or even better ... permissions from the parent folder and add Group B and have inheritance ...
    (microsoft.public.windows.server.general)
  • RE: Printing Errors
    ... Permission Error Messages Occur When Printing with the Guest Account ... you may receive an error message when the print job ... Spool folder. ... Windows sets stricter permissions on the Spool ...
    (microsoft.public.win2000.printing)
  • Re: Sharing folders that everybody can read ?
    ... Enable Guest account, open share permissions, add Guest and check Read ... how to let ANYBODY read a folder. ... same on both machines, but different passwords, I get the dialog ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Accessing files on a Network
    ... change file permissions in XP ... 304040 Description of file sharing in XP ... make sure the guest account has ... permissions set in the share (and folder if NTFS) that you ...
    (microsoft.public.windowsxp.network_web)
  • RE: Windows 2003 x64 print server problems
    ... NTFS permissions on the Spool folder. ... Enable the guest account on the computer that is hosting the shared ... On the client computer, log on as the user and add the printer. ... Please uncheck "Automatically detect and install my Plug and Play ...
    (microsoft.public.windows.server.general)