Re: Need help with program restrictions and links

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 07/20/04


Date: Tue, 20 Jul 2004 17:20:45 -0400

There is always Start, Run and enter LUSRMGR.MSC Go to the Users folder and open it. Double click on her username and select "Account is disabled". Leave it that way for a week or two.

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Todd Prickett" <QPCSDPTNTIYG@spammotel.com> wrote in message news:53fbe6fb.0407200503.54573c98@posting.google.com...
> Thanks for the response Doug.
> 
> I actually did what you recommended originally.  The problem is that
> every time I DENY her execute on a program, she simply reinstalls it
> elsewhere, or downloads a different, but similar program.  It then
> falls to me to track down what she is CURRENTLY running :-(
> 
> Its just way easier for me to have her have to request permission to
> install/run new programs.
> 
> That's a good heads up on the DENY and Users group!  That could have
> been a pain!  But, when I chose DENY, I also chose to not apply this
> to administrators.  Since there are only two users (me, an admin, and
> her, a user) I don't see this as a problem.
> 
> 
>> Todd,
>> 
>> You may want to take a simpler approach.   I'm assuming you're running 
>> XP Pro.  All you need to do is to add her username to the Security 
>> Properties for each executable that you do not want her to run, then 
>> click the Deny boxes.   You can also do the same for the folder that the 
>> program is installed in.
>> 
>> DO NOT use DENY on the Users Group.  All users on the computer are 
>> members of this group, so Deny would apply to all users.  Apply Deny 
>> permissions to specific Users.
>> 
>> XP PRO:  In Windows Explorer, go to Tools, Folder Options, View and 
>> uncheck Use Simple File Sharing.  Now, when you right click on a drive, 
>> folder or file (on an NTFS partition) and select Properties, you'll see 
>> a Security tab.  Here you can assign or deny permissions based on user 
>> name or user group membership.
>> 
>> HOW TO: Set, View, Change, or Remove File and Folder Permissions in 
>> Windows XP
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;308418
>> 
>> HOW TO: Set, View, Change, or Remove Special Permissions for Files and 
>> Folders
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419
>> 
>> HOW TO: Disable Simplified Sharing and Password-Protect a Shared Folder 
>> in Windows XP
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;307874


Relevant Pages

  • Re: folder permissions
    ... I will have this other folder I am trying to restrict permissions ... say) and "superceed" any NTFS permissions. ... groups and something about deny over rides allow. ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: folder permissions
    ... and how the folder structure you require needs to be configured. ... groups and something about deny over rides allow. ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: NTFS woes
    ... starting with a grant of Full and subtracting part of it ... gives it and it gets taken away by deny) but this Posix compliance ... On the parent folder I already had unchecked Take Ownership, ... Permissions and Delete. ...
    (microsoft.public.windows.server.security)
  • Re: NTFS style permissions on Linux
    ... Traverse folder / execute file = Allow ... Write Extended Attributes = Deny ... Linux acls do not match windows permissions 1:1, ...
    (alt.linux)
  • Re: Folder not inheritting permissions
    ... Per user Group Policy Restrictions for XP Home and XP Pro ... > I applied permissions for the users group, and creator owner at the C:\ ... When new user accounts are created their associated profile ... > will create the folder) then logging on with my account which has admin ...
    (microsoft.public.windowsxp.security_admin)