Re: Limited account .... Too free

From: Karl (Bill.Gates_at_microsoft.com)
Date: 08/29/03


Date: Fri, 29 Aug 2003 05:19:23 GMT


Ok, so you want to setup a user with limited acces on your PC
You are using NTFS which is the real solution here.

If you have 1 drive in your PC, then great! Else, repeat these steps for
each hard drive
Right click on C drive, goto properties and select Security. Add his
account and yours.
Make sure your account as FULL acces to everything else you can lock youself
out!

Remove Everyone
Change his account so that he has access to everything but is unable to make
modifications (Virtually read only)
Apply this change to Every file, folder and subfolder so that it will affect
everything on your PC

You will need to watch be careful here as now he is strictly read only and
windows can not update his settings from here on out. I do not know what
the impact is from doing this as it is a rather broad and extreme way to
limit access.

My other suggestion would be to change his profile to a mandatory profile so
that any work he does will dissapear after he logs off. I have not worked
with mandatory profiles enough to know what the user can and can not save so
this may not be your solution either.

You can also use a GPO but this does affect everyone on that machine. You
can block yourself out as well unless you know how to remove the local GPO

Then there are 3rd party utils to secure per user but I do not know of any
tools off hand

-Karl



Relevant Pages

  • Re: [Fwd: User account ( hacked ) of FC6 System]
    ... I think the real solution is to teach your user that it is important ... You'll have to fix them for the existing broken account first, ... the files over from a working account as root. ... chown root /home/edward ...
    (Fedora)
  • geust account
    ... i have loaded speedtouch access onto my guest account as i wanted someone to ... use this account as it offers limited acces to the rest of the p.c.. ...
    (microsoft.public.windowsxp.security_admin)

Loading