Re: XP Specific Program Access for Limited User Accounts

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/03/03

  • Next message: TOM: "server access denied problem with Windows XP" 
    Date: Tue, 2 Dec 2003 22:32:54 -0700

    The most direct way to do this for a small number of
    machines is by control with the NTFS permissions on
    the files needed to run the application.
    For example, one of these apps installed to
    c:\program files\software vendor\app name
    In the default the Users group has read/execute on this.
    You only want specific accounts to use this so you
    define a custom group, app-users for example, and
    place as members of app-users those account that
    should have the ability to run the app. Then, on the
    folder of the app in Program Files you replace the
    Users group with the app-users group.
    If there are many machines, then you might wish to
    look at using software restriction policy if GPOs in
    your Active Directory.
    Either way it is less confusing for the accounts that do
    not have access if they do not even have shortcuts for
    the apps they cannot run. To adjust this you need to
    remove the start menu program items and if present
    items in \desktop from the All Users profile after having
    copied them to the individual profiles that should have
    access. 

    -- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Vaughn" <anonymous@discussions.microsoft.com> wrote in message
news:008f01c3b957$c354be30$a001280a@phx.gbl...
> Our small business has XP Pro, and I want to allow our
> receptionist (for whom I've created a limited account) to
> run Quickbooks, IE, Office and other current programs,
> but I don't want her to be able to install new software.
> How do i allow a limited user account in XP access to a
> specific programs?
  • Next message: TOM: "server access denied problem with Windows XP"

    Relevant Pages

    • Re: How to create a user with access to one server only.
      ... like a local user account on a specified machine. ... individual machines, ... Users as members in the Users group of domain joined machines. ... does still have some grants to it automatically. ...
      (microsoft.public.windows.server.security)
    • Re: How to create a user with access to one server only.
      ... like a local user account on a specified machine. ... individual machines, ... Users as members in the Users group of domain joined machines. ... does still have some grants to it automatically. ...
      (microsoft.public.windows.server.security)
    • Re: How to create a user with access to one server only.
      ... I would like to create a domain-wide user account with almost no rights ... Most people fail to take explicity control over login rights on ... individual machines, ... Users as members in the Users group of domain joined machines. ...
      (microsoft.public.windows.server.security)
    • Re: How to create a user with access to one server only.
      ... I would like to create a domain-wide user account with almost no rights ... Most people fail to take explicity control over login rights on ... Users as members in the Users group of domain joined machines. ...
      (microsoft.public.windows.server.security)
    • Re: IPC$ login
      ... Enter the password of the account on the target computer, ... machines for all users in your workgroup. ... Administrator or Limited Account, which is the Users group, or perhaps ... > I can't enter the XP Pro from any computer. ...
      (microsoft.public.windowsxp.security_admin)