Re: Locking down windows?

From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 03/31/04


Date: Wed, 31 Mar 2004 05:21:28 -0600

MuggyB wrote:
> I have a stand alone PC running XP pro. I would like to create an
> account for my son which will give him minimum access, while keeping
> full access on the admin account.
> I don't want my son accessing any system tools, run menu, any folders
> apart from his document folders.
> How is this possible to set up? I have tried a few tests with group
> policy editor like disabling control panel etc but this also disables
> it from my admin account too which I don't want!

You can do what you want with either XP Home or XP Professional by locking
the machine down and giving the kids their own username and password that
does not have administrative rights on the computer.

Locking the machine down would include:
- putting a password on the system BIOS and making sure that the machine is
only bootable from the hard drive without accessing the BIOS.
- Making sure the computer case is not easily opened.. Many cases have a
"ring" you can put a padlock through to prevent such intrusions.
- Your account and all other accounts on the computer would need to be
password protected. Your passwords YOU only know. Not easily guessable or
hacked.. Meaning you should come up with a phrase or something and use it..
You have up to 127 characters, including spaces you can use. Mix some
numbers in that password to.. Punctuation is good as well.
- their accounts would be limited accounts, only having rights to what you
give them. You could go so far (easily) as to make it where only you could
install things on the computer. You could lock down the DVD/CD burner, but
I seriously cannot see how anyone could break it through normal use.. I have
burned thousands of DVDs and I'd venture 100,000 + in CD burners and never
had one "wear out" that I did not expect to. With limited accounts, they
could not stop some services (like the built in firewall, antivirus software
you install and run, etc.)

You are going to have to learn some things in order to administer the
computer properly, however. It's not going to be a "simple" process where
you create their accounts and move on if you have never done any of this
before. You will become a semi-IT person by the time you finish setting up
user accounts, locking down the various directories and using a BIOS
password. This is what your IT people at work probably go through to some
extent all the time.

Some of this is good starting material:

HOW TO: Create and Configure User Accounts in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;279783&Product=winxp

HOW TO: Set, View, Change, or Remove Special Permissions for Files and
Folders in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308419&Product=winxp

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Good Luck.. Read up, do Google searches, look around these newsgroups and
ask questions as needed.. You'll be a junior admin and have your kids
frustrated in no time.. grin

-- 
<- Shenan ->
-- 


Relevant Pages

  • Re: Lock down drive
    ... Set a password in the BIOS that must be entered before booting the operating system. ... Set strong passwords on all accounts, ... If you leave your own account logged in, use the Windows Key + L to lock the computer when you step away from the computer and require a password to resume. ... you can set user permissions/restrictions with Group Policy but be careful. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password protection .
    ... > so kids couldn't use the computer without my promission?Is ... only bootable from the hard drive without accessing the BIOS. ... Your account and all other accounts on the computer would need to be ... Create and Configure User Accounts in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Recently my son, Jack, committed suicide after loosing the account he worked on for about two ye
    ... We played Eve as a family, my son and my daughter and I. ... To the extent of closing ALL on-line gaming accounts FOR EVER ... I am hoping that in the future, perhaps, customers of these games will ...
    (comp.sys.ibm.pc.games.rpg)
  • Re: Preventing kids mucking up PC!
    ... NervousDad wrote: ... only bootable from the hard drive without accessing the BIOS. ... Your account and all other accounts on the computer would need to be ... Create and Configure User Accounts in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: My son being taxed.
    ... for the "unpaid" tax and NIC over however many years it may be. ... Presumably that is the moment your son "forgot" to ... declare his BS Accounts? ... a copy of the particular bank account that the cheque came out of. ...
    (uk.finance)