I have windows XP and recently my relatives came mess up my computer. I have a cousin who stays with me too but doesn't know how to use computer much.
I would like to create and account for him under the user group but i couldn't give much restrictions like opening of files and other configurations. can i restrict limited users to open certain .exe files and folders or drives? i have looked almost everywhere but coulnd't get the correct answer. any help?
all i could do is to restrict him from installing programs! i would also like to restrict him from using the registry?
07-05-2005, 03:35 PM
I thought that if you are on a limited account you couldn't make *major* changes to the pc you're working on..like editing entries in the registry...;)
07-06-2005, 06:11 AM
With WinXP Home Edition you are very limited (no pun intended) on the user group restrictions. You are for the most part restricted to what is currently set. WinXP Professional edition on the other hand allows you to specifically define user groups and what they can and can't do.
If I had known that I would have never gotten the Home Edition myself.
i have Windows XP professional. could you tell me how to restrict the stuffs like you told me, Spookster. i just figure out how to get there even though i'm the administrator! i have looked everywhere - google, help file, but just can't figure out.
07-06-2005, 01:00 PM
Well in that case then you can define group policy and apply it to a group you have created or to one of the existing groups. Here is a brief introduction on defining group policies: http://www.theeldergeek.com/gp02.htm
And you can create, edit user groups in the administrative tools section under computer management.
If you've not resolved that yet, you could use Active Directory.
It is quite impressive and extremely hard to code apps for - I know, I've done it with Veritas.
But it is just something you would not come across unless you were doing a MCSA/E/D course. But costing £14k to do, I doubt you would have.
http://www.microsoft.com/windows2000/server/evaluation/features/dirlist.asp - that explains it somewhat more. You can get it in Win2k3, and possibly in XP Pro.
07-06-2005, 05:24 PM
Unfortunately AD isn't really for use with a stand alone system... To do it, you need to setup a domain server.
07-08-2005, 04:06 PM
A registry tweak can be used to turn the Group Policy Editor on for XP Home...
Should not be too hard to find thru a Google Search if interested...
07-14-2005, 09:00 PM
Also as far as restricting access to certain files, you can use the full fledged NTFS security assuming the volume/drive the files are on is using a NTFS file system and not FAT32. The "normal" security stuff is turned of because Microsoft must of felt that "Professional" users were too dumb to use the same stuff they had been using in like Win2k and NT4 and so on. To turn it back on, go to My Comptuer then Tools then Folder Options then on the View tab uncheck the last checkbox in the list called "Use Simple File Sharing" then say okay, now when you click on files or folder and view their properties, you can use the security tab and set access to them by users or groups.