Re: limited user account permissions

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/21/03 

Date: Sun, 21 Dec 2003 15:52:12 -0700

Many programs during their install place icon/shortcuts
into the .\desktop and .\Start menu folders in the profile
Documents and Settings\All Users
You can copy those that should only be visible to some
accounts into the corresponding location in the profiles
of those accounts and then delete them from the All Users
profile.
Note that doing this only removes the convenient ways
to launch the programs. To also make it so that only the
specific accounts can use the programs you need to adjust
the NTFS permissions on the location where the program
is installed. This is usually a folder in Program Files,
but may be elsewhere. One can go into the Security dialog
in the r-click Properties of the folder at the top of that
application's storage and add grants to accounts that should
have access so that they look that same as the grant to the
Users group, and then remove the grant to the Users group.
This way the accounts you specifically granted permisssions
can run the program, but other members of the Users group
(all limited accounts) can no longer run it.
The Security dialog is always available in a safe mode boot. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"jack" <anonymous@discussions.microsoft.com> wrote in message
news:00e401c3c7ff$cceb5ab0$a401280a@phx.gbl...
> windows xp home
>
> limited user account displays programs not acceptable for
> account.
>
> how to specifically delegate what is availible?

Relevant Pages

  • Re: Windows Server 2003 Service Pack 1 will not install
    ... You can try to install the Windows 2003 ... Expand to Windows Logs -> Application and right-click to select Save ... of the public folder database files. ... domain to the new SBS 2003 installation, way is to create a local profile, ...
    (microsoft.public.windows.server.sbs)
  • Re: limited account and installing software
    ... so now they can't install software, but they now can't play the game ... folder and Desktop folder shortcuts from the user profile from which the ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete user profile folder using default Admin. acco
    ... clean install is problematic. ... the original profile folders using procedures outlined ... the second account's original profile folder is giving me ... It appeared to have been deleted like the first account ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Error: 0x80090016
    ... the certificate may want to install to a profile path. ... C:\Documents and Settings\All Users\Application Data folder is a hidden ...
    (microsoft.public.windowsxp.general)
  • Re: Install appliaction for multiple limited access users
    ... > how can I install an application so that the limited access accounts can run ... Start Menu folder and Desktop folder shortcuts from the user profile ...
    (microsoft.public.windowsxp.security_admin)