hidden hit counter
Welcome to WindowsForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Limiting user rights.

 
   Windows XP (Home) -> Security Admin RSS
Next:  Do I Have A Worm or Not?  
Author Message
Richard McKeown

External


Since: Oct 01, 2008
Posts: 1



(Msg. 1) Posted: Wed Oct 01, 2008 6:27 am
Post subject: Limiting user rights.
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

Is there any way that I can set up an account of some type on my XPpro
machine so that my son cannot delete any files, icons, change settings,
but still be able to access programs that I can nominate and create
files from those programs, and create text files from outside of those
programs?

He's 3, and I wouldn't mind letting him stuff around on my computer, if
I knew that he couldn't stuff something up. The other option is to cram
a crowbar in the wallet and set one up for him. The only problem with
that is having to fix the problems on that computer, although they'd
probably be not life-shattering problems I suppose...

 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Malke

External


Since: Feb 09, 2008
Posts: 177



(Msg. 2) Posted: Wed Oct 01, 2008 6:27 am
Post subject: Re: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Richard McKeown wrote:

> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create
> files from those programs, and create text files from outside of those
> programs?
>
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to cram
> a crowbar in the wallet and set one up for him. The only problem with
> that is having to fix the problems on that computer, although they'd
> probably be not life-shattering problems I suppose...

A 3-year-old is much too young to be allowed on your computer unsupervised.
I have some funny stories about things my own children did on my machines
when they were little. Well, they are funny *now*!

Most certainly you should create a limited account for him, too. Since you
have XP Pro, you can use Group Policy to set restrictions (gpedit.msc). Be
very careful using the Group Policy editor; it is completely possible to
lock yourself out. Questions about group policy should be posted here:

microsoft.public.windows.group_policy

Or you can use Microsoft's SteadyState:

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
More on SteadyState: http://aumha.net/viewtopic.php?t=27570
SteadyState support -
http://forums.microsoft.com/WindowsToolsandUtilities/ShowForum.aspx?Fo...ID=1660

If you are serious about allowing your child - and he could be a perfect
angel but he *is* only 3! - to play on your computer unsupervised, buy an
external hard drive and Acronis True Image and image your system regularly.
That way when he hoses your computer by banging on the wrong keys you'll be
able to get back up and running quickly. Actually, regular imaging is a
Good Thing even if there are no children around!

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Newell White

External


Since: Aug 24, 2006
Posts: 21



(Msg. 3) Posted: Wed Oct 01, 2008 7:39 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Richard McKeown" wrote:

> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create
> files from those programs, and create text files from outside of those
> programs?
>
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to cram
> a crowbar in the wallet and set one up for him. The only problem with
> that is having to fix the problems on that computer, although they'd
> probably be not life-shattering problems I suppose...
>
Create an account in the group Users - not a Power Users.
If this is not restrictive enough, try the built-in Guest account.
--
Newell White
 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Malke

External


Since: Feb 09, 2008
Posts: 177



(Msg. 4) Posted: Wed Oct 01, 2008 10:01 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Newell White wrote:

> Create an account in the group Users - not a Power Users.
> If this is not restrictive enough, try the built-in Guest account.

The built-in Guest account should not be enabled. The Guest account is a
special system account. It is disabled by default in Windows XP, Vista,
Linux, Unix, and OS X for a reason.

From TechNet:

"The Guest account is intended for users who require temporary access to the
system. However, if this account is enabled, a security risk may exist
because an unauthorized user could gain anonymous access to the system
through this account."

http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ
 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Newell White

External


Since: Aug 24, 2006
Posts: 21



(Msg. 5) Posted: Thu Oct 02, 2008 4:02 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Malke" wrote:

>
> The built-in Guest account should not be enabled. The Guest account is a
> special system account. It is disabled by default in Windows XP, Vista,
> Linux, Unix, and OS X for a reason.
>
> From TechNet:
>
> "The Guest account is intended for users who require temporary access to the
> system. However, if this account is enabled, a security risk may exist
> because an unauthorized user could gain anonymous access to the system
> through this account."
>
> http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>
>
You are probably right - depends on physical access.
When I worked at home my 4-year old had great fun with MS Paint on a Win95
machine that was not hooked up to my (then) state-of-the-art 56k modem!

--
Regards,
Newell White
 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Newell White

External


Since: Aug 24, 2006
Posts: 21



(Msg. 6) Posted: Thu Oct 02, 2008 4:14 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Richard McKeown" wrote:

> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create
> files from those programs, and create text files from outside of those
> programs?
>
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to cram
> a crowbar in the wallet and set one up for him. The only problem with
> that is having to fix the problems on that computer, although they'd
> probably be not life-shattering problems I suppose...
>
Having read Malke's comment, I now recommend plan B.
But need not be expensive - here in the UK you can get a Win98 PC and CRT
monitor second hand for £50 max ($95 US).

MS Paint is about all a 3-year old can handle, but they can soon graduate to
minesweeper, solitaire, and eventually notepad!
Don't provide internet or LAN access, and have fun!

--
Regards,
Newell White
 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Daniel Crichton

External


Since: Apr 25, 2006
Posts: 10



(Msg. 7) Posted: Thu Oct 02, 2008 9:28 am
Post subject: Re: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Richard wrote on Wed, 01 Oct 2008 23:02:09 +1300:

> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create files
> from those programs, and create text files from outside of those programs?

> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to
> cram a crowbar in the wallet and set one up for him. The only problem
> with that is having to fix the problems on that computer, although
> they'd probably be not life-shattering problems I suppose...

My 3 year old has a Limited User account on the kid's PC (my 9 year old has
a Limited User account too), and so far so good - I have to install anything
as the only admin user, but it's enough that the kids can't delete much
except files they've created, they can create icons on the desktop, and they
can access the net when I let them (combination of FSS and router access
rules, and keeping a close on them when they're on the computer). This PC
hasn't needed a rebuild since I installed everything a year ago, so I rate
that as a success. I wouldn't let him on my own PC though, that's just
asking for trouble.

--
Dan
 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
tytiiiore

External


Since: Oct 02, 2008
Posts: 1



(Msg. 8) Posted: Thu Oct 02, 2008 5:26 pm
Post subject: Re: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

   Dick was seven years old, and his sister,
Catherine, was five. One day their mother took them to their aunt's
house to play while she went to the big city to buy some new
clothes.  The children played for an hour, and then at
half past four their aunt took Dick into the kitchen. She gave him a
nice cake and a knife and said to him, "Now here's a knife, Dick. Cut
this cake in half and give one of the pieces to your sister, but
remember to do it like a gentleman."  "Like a gentleman?"
Dick asked. "How do gentlemen do it?"  "They always give
the bigger piece to the other person." answered his aunt at
once.  "Oh" said Dick. He thought about this for a few
seconds. Then he took the cake to his sister and said to her,"Cut this
cake in half, Catherine.". * 'Pet products'
(http://www.lovelonglong.com), 'dog bed' (http://www.lovelonglong.com),
'pet supply' (http://www.lovelonglong.com), 'Dog Collar'
(http://www.lovelonglong.com), 'Dog Clothes'
(http://www.lovelonglong.com) *




--
tytiiiore
 >> Stay informed about: Limiting user rights. 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Limiting User Times - Hi everyone, i want to ask that how can i limit local users on my Win XP Professional system to specific times daily. I have read about it but i dont know how to use it. i want different times for every user on my computer. Can anyone help me with..

User Rights - I am running Windows XP Home, SP2, and I am tryin to find out how to set rights for my 4 other users. One is an admin like me, and the others are limited, but I want to disable certain things in their accounts as well as the other account. Plz help?...

User Accounts (No Administrator Rights) - Ok, here is the deal... I have XP Media Center Edition and I have lost my administrator rights. If I go into "safe" mode I see all my programs there that were on my old account, the one that had admin rights. I can no longer download any pr...

User Rights and Windows XP hotfixes - Hi, Does anyone know or have experienced the user rights changing after applying any of the hotfixes for Windows XP Pro? i.e. secpol.msc-local security policy-user rights... The administrator group was removed from several policies. There..

lab user logs on because they have no rights to install - On our club 25 node network, the adobe reader installs everytime a PDF file is opened. This works OK for me with my administrator's rights. But it hangs when a lab user logs on because they have no rights to install adobe reader. How can this be changed...
   Windows XP (Home) -> Security Admin All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
  Windows XP
 Win 2000/NT/98/ME
 Windows Vista!


[ Contact us | Terms of Service/Privacy Policy ]