Re: Software and Desktop Restrictions

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 10/23/03


Date: Thu, 23 Oct 2003 17:10:10 -0400

See www.dougknox.com, Win XP Utilities, Windows XP Security Console for a
small utility that will allow you to put in restrictions on features, on a
per user basis.

Then you need to investigate file and folder security.

To do this, you must be running NTFS as your file system on the drive in
question. If your hard disk/partition is not NTFS you will need to convert
it. To do this, open a Command Prompt window and enter the following
command:

CONVERT X: /FS:NTFS

Where X: is the drive letter you wish to convert. You may also want to see
http://www.aumha.org/a/ntfscvt.htm to ensure that you're getting the optimal
conversion.

After this step is completed and you've rebooted the computer, if necessary:

XP PRO: In Windows Explorer, go to Tools, Folder Options, View and uncheck
Use Simple File Sharing. Now, when you right click on a drive, folder or
file (on an NTFS partition) and select Properties, you'll see a Security
tab. Here you can assign or deny permissions based on user name or user
group membership.

XP Home: By default, you can only make files and folders under My Documents
"private". This is done by right clicking a folder or file and selecting
Properties, Sharing. To change the permissions on other folders, you need
to boot the computer to Safe Mode and log in on the built in Administrator
account. In this mode, you'll see the Security tab in Properties, and you
can assign permissions based on user name or group membership.

How Do I Get the Security Tab in Properties - XP Home (makes the Security
tab appear outside of Safe Mode)
http://www.dougknox.com, Win XP Tips section

HOW TO: Set, View, Change, or Remove File and Folder Permissions in Windows
XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

HOW TO: Set, View, Change, or Remove Special Permissions for Files and
Folders
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419

HOW TO: Disable Simplified Sharing and Password-Protect a Shared Folder in
Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;307874

-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"John" <john.sanfelippo@stfrancisbank.com> wrote in message
news:030b01c39999$85a38cc0$a301280a@phx.gbl...
> Does anyone know how to (or know the link to some MS
> whitepapers) control what local users see after logging
> in? I do not have a server setup and everyone is logging
> into the same computer.  I am trying to minimize the risk
> of my roomates messing up the computer.  Ideally I would
> like to control exactly what they see on the Start menu
> and desktop.  I would also like to limit what directories
> they can see on the hard drive.  Please help me if you
> can, it would be greatly appriciated.


Relevant Pages

  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: Norton Internet Security has screwed up my system...HELP!!!!!!
    ... I was having problems installing Norton Internet security 2006 ... Internet Explorer and windows media player 10 are completely messed up!!! ... GO TO TOOLS AND THEN FOLDER OPTIONS, THEN GO TO THE VIEW TAB. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • C:System Volume Information - Left-Click denied, yet Right-Click works - Retaken Own
    ... | with permissions granting you Full Control? ... To take ownership of the System Volume Information folder: http://support.microsoft.com/kb/308421 ... the only SID which has any access to the folder is NTAUTHORIT/SYSTEM (i.e. Windows XP) ... My "Security" Suite reports: ...
    (microsoft.public.windowsxp.general)
  • Re: Too late for Administrators Password?
    ... if you're going to be messing with permissions then ALWAYS FIRST SET ... folder and click the Security Options folder. ... Next, administrator, you need to have the security tab show when you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Default everyone group
    ... The everyone full access should only be on the root folder. ... I always change the ntfs permissions on my root folders to ... tightening up security in this regard. ... computers running Windows XP Professional and members of the Windows .NET ...
    (microsoft.public.win2000.security)