I currently have Windows XP Home Edition on my computer which is not
on any network (except for DSL connection to the Internet).  I am
considering upgrading to XP Professional.

I need a total of three logins:
	1) myself (Admin)
	2) my wife (Admin)
	3) "Kids" (limited user)

Issue #1:  File access
I would like my wife and I to have seperate logins - i.e. even though
she and I share the same role, I don't want to share a login.  I know
how to do that.  Here's the tricky part:  I want to have "our
documents" in a place that both my wife and I can access them, but not
our kids.  At least in XP Home, if I put them in the "Shared Folder,"
my kids can get to them, too.  If I put them in "Eliezer's Documents"
(that's me), then my wife cannot access them.

Issue #2:  Internet access
I want my wife and I to have unrestricted access to the Internet.  I
do not want my kids to be able to access *any* Internet at all.  What
I would like to *ideally* do is allow the kids' login permissions to
use Internet Explorer, but only for webpages on the local computer,
not anything from the Internet.  If that level of granularity is not
possible, the next best thing would be to deny them running IE at all.
 The only way I see to do anything like that in a "straightforward"
way is to not allow *any* users on the computer to use IE - that, of
course, is ridiculous.  I can't find a setting for an admin (me) to
bar *only* limited users' (kids') logins from using IE, while
permitting admins access to IE.
Someone suggested to me checking off the checkbox in IE's Internet
Tools that says to use a proxy server.  Since, in reality, there is no
proxy server, it would essentially disable Internet access. 
Obviously, getting around that would be as easy as unchecking the box,
but they most likely would not find it.  Well, probably not.  I'm not
so comfortable with that idea - too easy for them to get around it.

Issue #3:  Hiding anti-spyware/anti-virus programs from limited users.
I'm using ViRobot by Hauri Inc. for anti-virus software, and Spybot
Search and Destroy for anti-spyware.  Is there a way that these two
programs can run while the kids are logged in, too, (i.e. not only
when I'm logged in) but invisibly and in a way that they cannot modify
any settings at all (i.e. not be able to open the programs)?  Right
now, they can open the programs, just if they try to change any
settings, it won't let them (I *think*)...

Issue #4:  ViRobot won't start scheduled tasks while computer is in Stand-By mode
I know how to have ViRobot update itself from the Internet and scan my
computer as scheduled tasks.  But I want that scheduled in the middle
of the night and would like to leave my computer in Stand-By mode.  Is
there any way to have it "wake-up" the computer to run those scheduled
tasks with these two programs specifically?

So, in a nutshell, here are the questions:
1) Specifically (i.e. step by step) how do I handle these 4 issues?
2) Will upgrading to XP Pro help me with any/all of these issues?

Thank you,
Eliezer

---

Clarification of Question by reblazer-ga on 30 Dec 2004 14:50 PST

Although I ideally would like answers to all 4 questions, the first 3
are the most important to me and could do without the 4th question if
that's hindering my receiving an answer.

Thanks,
Eliezer

---

Clarification of Question by reblazer-ga on 13 Jan 2005 21:41 PST

alienarrival and methodical,

On issue #1, I tried what you are saying and it seems that you are
both correct - but only for XP *PRO* - I am using Home, and it doesn't
seem to have those options.  In XP Home, Simple Security is always on
- there's not even such a checkbox option in Home...

Any other ideas?

Thanks!
Eliezer

With regard to #1, if you disable simple file sharing (in Explorer, go
to Tools -> Folder Options -> View, uncheck "Use Simple File
Sharing"), you'll be able to configure folder permissions on a user by
user basis, meaning you can make a directory that only you and your
wife can view.

You should be able to take care of issue #2 by messing around with
group policies (start -> run -> mmc -> file -> Add/Remove snapin ->
Add -> Group Policy), though I've never actually done it.

1- if both you and your wife are admins, an admin can access any file
or folder, so: as you stated,
create the three seperate users (or more cause kids seems to be plural
and you may want to observe individual activity)
Then right click on My Compter > Manage > Local Users and Groups > Users > 
for each of the users in User properties > Member of > ADD
administrator group for both you and your wife, and keep kids as just
users.

Then, for the OUR folder , select the folder ,right click  properties
> security and deny all privalages to the Kids user, and make hidden
if u want.

2-3-4 check out PC-cillin Internet Security - it is password
protected, and will internally schedule the spyware and virus scans,
and has URL filtering which allows you to specify exactly what urls
you allow acces to, and it has profile switching that allows you to
change all the settings practically with a single click.

http://www.trendmicro.com/en/products/desktop/pc-cillin/evaluate/overview.htm

it has the ability to:
Comprehensive Virus Security
Enhanced Spyware Detection and Removal
Anti-Phishing 
Home Network Control 
Wi-Fi Intrusion Detection
Improved Spam Filtering 
Personal Firewall


theres even a 30 day trial and a $25 rebate at retailers !