 |
|
|
|
Next: Do I Have A Worm or Not?
|
| Author |
Message |
External
Since: Oct 01, 2008
Posts: 1
|
(Msg. 1) Posted: Wed Oct 01, 2008 6:27 am
Post subject: Limiting user rights.
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)
|
|
|
Is there any way that I can set up an account of some type on my XPpro
machine so that my son cannot delete any files, icons, change settings,
but still be able to access programs that I can nominate and create
files from those programs, and create text files from outside of those
programs?
He's 3, and I wouldn't mind letting him stuff around on my computer, if
I knew that he couldn't stuff something up. The other option is to cram
a crowbar in the wallet and set one up for him. The only problem with
that is having to fix the problems on that computer, although they'd
probably be not life-shattering problems I suppose... |
|
| Back to top |
|
 | |
External
Since: Feb 16, 2008
Posts: 123
|
(Msg. 2) Posted: Wed Oct 01, 2008 6:27 am
Post subject: Re: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Richard McKeown wrote:
> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create
> files from those programs, and create text files from outside of those
> programs?
>
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to cram
> a crowbar in the wallet and set one up for him. The only problem with
> that is having to fix the problems on that computer, although they'd
> probably be not life-shattering problems I suppose...
A 3-year-old is much too young to be allowed on your computer unsupervised.
I have some funny stories about things my own children did on my machines
when they were little. Well, they are funny *now*!
Most certainly you should create a limited account for him, too. Since you
have XP Pro, you can use Group Policy to set restrictions (gpedit.msc). Be
very careful using the Group Policy editor; it is completely possible to
lock yourself out. Questions about group policy should be posted here:
microsoft.public.windows.group_policy
Or you can use Microsoft's SteadyState:
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
More on SteadyState: http://aumha.net/viewtopic.php?t=27570
SteadyState support -
http://forums.microsoft.com/WindowsToolsandUtilities/ShowForum.aspx?Fo...ID=1660
If you are serious about allowing your child - and he could be a perfect
angel but he *is* only 3! - to play on your computer unsupervised, buy an
external hard drive and Acronis True Image and image your system regularly.
That way when he hoses your computer by banging on the wrong keys you'll be
able to get back up and running quickly. Actually, regular imaging is a
Good Thing even if there are no children around!
Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ |
|
| Back to top |
|
| |
External
Since: Aug 24, 2006
Posts: 58
|
(Msg. 3) Posted: Wed Oct 01, 2008 7:39 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
"Richard McKeown" wrote:
> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create
> files from those programs, and create text files from outside of those
> programs?
>
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to cram
> a crowbar in the wallet and set one up for him. The only problem with
> that is having to fix the problems on that computer, although they'd
> probably be not life-shattering problems I suppose...
>
Create an account in the group Users - not a Power Users.
If this is not restrictive enough, try the built-in Guest account.
--
Newell White >> Stay informed about: Limiting user rights. |
|
| Back to top |
|
| |
External
Since: Feb 16, 2008
Posts: 123
|
(Msg. 4) Posted: Wed Oct 01, 2008 10:01 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Newell White wrote:
> Create an account in the group Users - not a Power Users.
> If this is not restrictive enough, try the built-in Guest account.
The built-in Guest account should not be enabled. The Guest account is a
special system account. It is disabled by default in Windows XP, Vista,
Linux, Unix, and OS X for a reason.
From TechNet:
"The Guest account is intended for users who require temporary access to the
system. However, if this account is enabled, a security risk may exist
because an unauthorized user could gain anonymous access to the system
through this account."
http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx
Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ >> Stay informed about: Limiting user rights. |
|
| Back to top |
|
| |
External
Since: Aug 24, 2006
Posts: 58
|
(Msg. 5) Posted: Thu Oct 02, 2008 4:02 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
"Malke" wrote:
>
> The built-in Guest account should not be enabled. The Guest account is a
> special system account. It is disabled by default in Windows XP, Vista,
> Linux, Unix, and OS X for a reason.
>
> From TechNet:
>
> "The Guest account is intended for users who require temporary access to the
> system. However, if this account is enabled, a security risk may exist
> because an unauthorized user could gain anonymous access to the system
> through this account."
>
> http://technet.microsoft.com/en-us/library/bb418978(TechNet.10).aspx
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>
>
You are probably right - depends on physical access.
When I worked at home my 4-year old had great fun with MS Paint on a Win95
machine that was not hooked up to my (then) state-of-the-art 56k modem!
--
Regards,
Newell White >> Stay informed about: Limiting user rights. |
|
| Back to top |
|
| |
External
Since: Aug 24, 2006
Posts: 58
|
(Msg. 6) Posted: Thu Oct 02, 2008 4:14 am
Post subject: RE: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
"Richard McKeown" wrote:
> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create
> files from those programs, and create text files from outside of those
> programs?
>
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to cram
> a crowbar in the wallet and set one up for him. The only problem with
> that is having to fix the problems on that computer, although they'd
> probably be not life-shattering problems I suppose...
>
Having read Malke's comment, I now recommend plan B.
But need not be expensive - here in the UK you can get a Win98 PC and CRT
monitor second hand for £50 max ($95 US).
MS Paint is about all a 3-year old can handle, but they can soon graduate to
minesweeper, solitaire, and eventually notepad!
Don't provide internet or LAN access, and have fun!
--
Regards,
Newell White >> Stay informed about: Limiting user rights. |
|
| Back to top |
|
| |
External
Since: Apr 25, 2006
Posts: 18
|
(Msg. 7) Posted: Thu Oct 02, 2008 9:28 am
Post subject: Re: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Richard wrote on Wed, 01 Oct 2008 23:02:09 +1300:
> Is there any way that I can set up an account of some type on my XPpro
> machine so that my son cannot delete any files, icons, change settings,
> but still be able to access programs that I can nominate and create files
> from those programs, and create text files from outside of those programs?
> He's 3, and I wouldn't mind letting him stuff around on my computer, if
> I knew that he couldn't stuff something up. The other option is to
> cram a crowbar in the wallet and set one up for him. The only problem
> with that is having to fix the problems on that computer, although
> they'd probably be not life-shattering problems I suppose...
My 3 year old has a Limited User account on the kid's PC (my 9 year old has
a Limited User account too), and so far so good - I have to install anything
as the only admin user, but it's enough that the kids can't delete much
except files they've created, they can create icons on the desktop, and they
can access the net when I let them (combination of FSS and router access
rules, and keeping a close on them when they're on the computer). This PC
hasn't needed a rebuild since I installed everything a year ago, so I rate
that as a success. I wouldn't let him on my own PC though, that's just
asking for trouble.
--
Dan >> Stay informed about: Limiting user rights. |
|
| Back to top |
|
| |
External
Since: Oct 02, 2008
Posts: 1
|
(Msg. 8) Posted: Thu Oct 02, 2008 5:26 pm
Post subject: Re: Limiting user rights. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
　　　Dick was seven years old, and his sister,
Catherine, was five. One day their mother took them to their aunt's
house to play while she went to the big city to buy some new
clothes.　　The children played for an hour, and then at
half past four their aunt took Dick into the kitchen. She gave him a
nice cake and a knife and said to him, "Now here's a knife, Dick. Cut
this cake in half and give one of the pieces to your sister, but
remember to do it like a gentleman."　　"Like a gentleman?"
Dick asked. "How do gentlemen do it?"　　"They always give
the bigger piece to the other person." answered his aunt at
once.　　"Oh" said Dick. He thought about this for a few
seconds. Then he took the cake to his sister and said to her,"Cut this
cake in half, Catherine.". * 'Pet products'
(http://www.lovelonglong.com), 'dog bed' (http://www.lovelonglong.com),
'pet supply' (http://www.lovelonglong.com), 'Dog Collar'
(http://www.lovelonglong.com), 'Dog Clothes'
(http://www.lovelonglong.com) *
--
tytiiiore >> Stay informed about: Limiting user rights. |
|
| Back to top |
|
| |
| Related Topics: | limiting a user account - I have to setup a computer with specialized alarm centre software. This sofwarepackage (with about 20 programs) is the only software that the users of this computer should be allowed to run. Everything else should require an administrator login. How....
limiting user acounts - I run a POS system on my computer for work. This system requires the use of the internet. Im having a big problem with employees using the internet for personal use. How do I set the user account so it will use the web site for the POS system and....
Remote Desktop Users and Least User Rights - We have undertaken a project to switch all of our users to standard user accounts (no administrative rights on the local machine). We have many users that are setup so that they can access their computers from home. We've noticed that when the user is..
Limit Active Directory User Rights - Hi I have a Server 2003 Standard with Active Directory, and I'm limiting 1 group to have the least amount of rights possible (ie. no right click, no permissions to create shortcuts, no start menu contents). The only problem I'm having is with the..
Restricted User Internet Access & Rights Problem - I need to know how to enable my brother to use the internet without giving him an unrestricted account, or without giving him the "Load and Unload device drivers" privileges. I basically disable the network drivers every time I dont use the ... |
|
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum
|
|
|
|
|
|
|
FAQ
Search
Profile
Private Messages
Log in
Windows XP