Re: Restricting user access to one file only

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/03/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Mon, 2 Dec 2002 21:14:30 -0500

"Junethesis" <michealc@mboxdesign.com> wrote in message
news:02a101c29a6a$ab05a540$89f82ecf@TK2MSFTNGXA01...
> Using Windows XP, how can I restrict a user's access on
> the computer to one file only? We have a multimedia
> program on the computer that our client wants its
> employees to run through, but they do not want to give
> their employees access to any other part of the computer.
>
> The computer is NOT on a network and has been set to login
> using the clissic login.

That's somewhat tricky, since the users need read and probably write access
to, say, the windowsroot folder and their profile folder under \Documents
and Settings\ So, they'll probably always have permission to read certain
config files and However, you harden a machine using the minimum required
NTFS permissions for their login ID and by doing Start, Run, MMC and add the
Group Policy MMC.

Also, make sure these users are not in the Administrators group, as you
can't secure any computer from users in this group.

You could also try using the Quotas feature to restrict how much space they
have available to save files on any NTFS partition. Right-click on the
drive to enable quotas and NTFS file permissions. While you're at it,
enable auditing. For more information:

http://securityadmin.info/faq.htm#auditing
http://securityadmin.info/faq.htm#4.41
http://securityadmin.info/faq.htm#harden

Relevant Pages

  • Re: WinXP home edition file permissions
    ... If your hard disk/partition is not NTFS you will need to convert ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ... Set, View, Change, or Remove File and Folder Permissions in Windows ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Limit user access to server
    ... to the Remote Desktop users group and make sure that group has the user ... >> needs then create your own local group and configure ntfs permissions ... For XP Pro and Windows 2003 Software Restriction ... >> Policies can also be used to restrict what applications a user can ...
    (microsoft.public.security)
  • Re: server 2003 standard folder shares
    ... Why it has to be so confusing in Windows Server 2003? ... > You have to keep in mine that SHARE permissions determine what type of the ... > share resource the user gets while NTFS permissions gives them ...
    (microsoft.public.windows.file_system)
  • Re: user accounts - limiting access
    ... If your hard disk/partition is not NTFS you will need to convert ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ... Set, View, Change, or Remove File and Folder Permissions in Windows ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Folder Protection
    ... If your hard disk/partition is not NTFS you will need to convert ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ... Set, View, Change, or Remove File and Folder Permissions in Windows ...
    (microsoft.public.windowsxp.security_admin)