Researcher,
I am running Windows XP SP1. I would like to know more about creating
user accounts for my machine that have various rescrictions, such as,
preventing them from: installing program, changing settings (Such as
in control pannel, or in any program, such as IE), running certain
programs (i.e. Let them run MS Word, but not MS Excel for example),
being able to see any files except in the directory I specify, etc.,
etc.
I have tried doing this myself but run into the following problems, so
please make sure you solution addresses these:
1. The user does not appear on the list of users on startup
2. The user has all the start menu programs that are listed for the
"Documents and Settings/All Users/Start Menu"
3. When the user logs in, and important startup programs start (Such
as the surge protection software), they recieve errors - something
about not having access to the disk or something similar
4. Additionally, when they run regular programs such as MS Word, it
has errors because of access restrictions
5. The user could still change settings, like taskbar settings, get
into the control pannel, etc.
6. The user could still get into Run, Search, and Settings items on the start menu
7. The user could see the system tray
I think the best answer for this (although if you have a better idea
go ahead) would be to create a user that has NO access to anything and
can't change or do anything (but still appears on the xp login list
and still is online (I am on a LAN)) and then show some steps as to
how to allow them to run a certain program (Without errors), how to
create a folder and give them write access, how to put just, say, the
Search item back on the start menu, etc. etc.
If you have any questions, I will respond to clarifications quickly. |
