XP limited user - Tilted Forum Project Discussion Community

MexicanOnABike · 07-19-2006, 06:51 PM

i have a question: is there a way to make a user and see everything they can do in a list?
i'm trying to restrict a limited user from seeing the content of all my drive. i only want it to go on the internet and msn. not installing anything, not fucking up my config settings.
so that means if they go on my computer, they will not be able to view the content of the c:, d:, and f

my harddrives...) they can view the cdroms though.

my system is XP pro ntfs. i need to know this by sunday if possible! i did a quick google search but i only find the basic FAQ on limited users.

and the guest acount is not good either.

Dilbert1234567 · 07-19-2006, 07:36 PM

...hiding porn...

Yes, and you can spend several years learning it. With xp, a limited user is in the group user, and any settings you apply to the user group will apply to them, with xp, to deny access to certain files and folders, you need to disable simple file sharing, this is the last item under the view tab in folder options. then on any folder or file, right click and select properties, and then the security tab and set your permissions there, be careful, removing to many will stop windows from functioning for the user, leave the windows folder alone, and users and settings, they will not have read access to any user and setting profile except there own, and windows will only have read access for the user, so don’t change them. Removing permissions from entire drives is easy, except on the system drive, just right click the drive, go to properties select security and select the user group and click the check mark under deny and full control, this will deny all access to the file/folder/drive.

A limited user should not be able to install programs, but windows is really bad at controlling this, there is always to run a program as the ‘system’ account under windows xp (6 years, still not patched) and with ‘system’ access, the administrative account can be cracked.

The Local Security Policy editor is also helpful for managing all aspects of an account, but you can seriously screw up your system by messing in here.

To open Local Security Policy, click Start, click Control Panel, click Performance and Maintenance, click Administrative Tools, and then double-click Local Security Policy

Google each setting before you change it, make

BE VERY CAREFUL YOU DONT REMOVE PERMISSIONS TO SOMETHING IMPORTANT!

as for viewing it, it would be a huge list, best bet is to hide what you want to hide, and make sure the 'limited user' should do the rest.

MexicanOnABike · 07-20-2006, 06:11 AM

ah great man! i had my fun removing access to all the files on the computer. now the user can only use some software and listen to mp3s.
and the reason is that i work with a ton of files(3d, photoshop, etc.) so i cannot have some idiot install a virus or decide to delete random files. and the reason i put the user account there is cuz this computer is at my gfs place and some of her friends like to check their msns and w/e.

now i'm gonna check the local security things. i hope that gets me further

Dilbert1234567 · 07-20-2006, 07:53 AM

Quote:

Originally Posted by mexicanonabike

and the reason i put the user account there is cuz this computer is at my gfs place and some of her friends like to check their msns and w/e.

sure.....

dont forget to log on as the user and give it a try first.

MexicanOnABike · 07-20-2006, 07:35 PM

Quote:

Originally Posted by Dilbert1234567

sure.....

dont forget to log on as the user and give it a try first.

oh i tried it!

i'm happy someone posted this stuff. now i guess i'll move on to program control a bit.

NotAnAlias · 07-20-2006, 11:19 PM

You could also try Start -> run -> gpedit.msc and have a look at a few things you do with local group policy settings.

07-19-2006, 06:51 PM	#1 (permalink)
MexicanOnABike Location: up north	XP limited user i have a question: is there a way to make a user and see everything they can do in a list? i'm trying to restrict a limited user from seeing the content of all my drive. i only want it to go on the internet and msn. not installing anything, not fucking up my config settings. so that means if they go on my computer, they will not be able to view the content of the c:, d:, and fmy harddrives...) they can view the cdroms though. my system is XP pro ntfs. i need to know this by sunday if possible! i did a quick google search but i only find the basic FAQ on limited users. and the guest acount is not good either. __________________ - Movie Reviews - Ratings-

07-19-2006, 07:36 PM	#2 (permalink)
Dilbert1234567 Devils Cabana Boy Location: Central Coast CA	...hiding porn... Yes, and you can spend several years learning it. With xp, a limited user is in the group user, and any settings you apply to the user group will apply to them, with xp, to deny access to certain files and folders, you need to disable simple file sharing, this is the last item under the view tab in folder options. then on any folder or file, right click and select properties, and then the security tab and set your permissions there, be careful, removing to many will stop windows from functioning for the user, leave the windows folder alone, and users and settings, they will not have read access to any user and setting profile except there own, and windows will only have read access for the user, so don’t change them. Removing permissions from entire drives is easy, except on the system drive, just right click the drive, go to properties select security and select the user group and click the check mark under deny and full control, this will deny all access to the file/folder/drive. A limited user should not be able to install programs, but windows is really bad at controlling this, there is always to run a program as the ‘system’ account under windows xp (6 years, still not patched) and with ‘system’ access, the administrative account can be cracked. The Local Security Policy editor is also helpful for managing all aspects of an account, but you can seriously screw up your system by messing in here. To open Local Security Policy, click Start, click Control Panel, click Performance and Maintenance, click Administrative Tools, and then double-click Local Security Policy Google each setting before you change it, make BE VERY CAREFUL YOU DONT REMOVE PERMISSIONS TO SOMETHING IMPORTANT! as for viewing it, it would be a huge list, best bet is to hide what you want to hide, and make sure the 'limited user' should do the rest. __________________ Donate Blood! "Love is not finding the perfect person, but learning to see an imperfect person perfectly." -Sam Keen

07-20-2006, 06:11 AM	#3 (permalink)
MexicanOnABike Location: up north	ah great man! i had my fun removing access to all the files on the computer. now the user can only use some software and listen to mp3s. and the reason is that i work with a ton of files(3d, photoshop, etc.) so i cannot have some idiot install a virus or decide to delete random files. and the reason i put the user account there is cuz this computer is at my gfs place and some of her friends like to check their msns and w/e. now i'm gonna check the local security things. i hope that gets me further __________________ - Movie Reviews - Ratings-

07-20-2006, 11:19 PM	#6 (permalink)
NotAnAlias Tilted Location: Auckland, New Zealand	You could also try Start -> run -> gpedit.msc and have a look at a few things you do with local group policy settings.