PDA

View Full Version : New user permissions


Tinman
December 6th 03, 09:57 AM
I need help with keeping other users on my machine from
accessing other programs. I have followed the artical
about how to allow or disallow access to Internet
Explorerwhere you can find the EXE and right click in it
from the admin account and select the security tab and
deny that user access to it. Ok my question is where is
the security tab to set this??
I am using XP pro and is connected to the internet via a
wireless card. below is an artical I am following:

************************************************** ********
"Prevent individual users from accessing anything on your
machine"

Search for executables Here's a great way to discover
where any executable is stored on your system:
1. Make sure you're on the Desktop and then press F3 to
launch the search menu.
2. Press the "All files and folders" link to enter your
search terms.
3. Type "*.exe" (without quotes) in the search field.
4. In the "Look in" field set this to My computer.
5. Press the search button.You should see a list of all
the executables stored on your system. Sort the list by
name and go directly down to the IE icon, right-click on
it, and choose "Properties." Add user to Groups and User
Names list In IE's properties menu, select the security
tab. You should see a list of users or groups under the
heading "Groups or Users Names." If the user you want to
deny access to IE isn't in the list, we need to add the
person to it. To do this, just press the "Add" button.
Here's how to add a user or group to the list:

1. In the field under the text labeled "Enter the object
names to select," type in the user account name you'd
like to add to the "Groups or Users Names" list. In my
case, I just type the name Joey.
2. Press the "Check Names" button. You should see the
name of the computer appear followed by a slash then the
user account name. This means it found the user account
you want to add to the list.
3. Press the OK button. Deny user from using program Now
that you've added the user account to the "Groups or
Users Names," single-click that user account to highlight
it. While the user account is highlighted notice how you
can edit the permissions for that account directly
underneath the "Groups or Users Names" list. The default
permissions for a limited account should always be set to
read/execute and read only. For little Joey I'm now going
to place a single checkmark in any of the boxes listed in
the "Deny" column. Doing this will place checkmarks
inside all of the permission entries in the list. The
last step is to hit the "Apply" button and you're done,
or, in little Joey's case, his surfing days are done
until his grades improve. The search you conducted to
find all the executables should still be open. If it is,
go ahead and deny access to a different program for
either the same user or a different one. When you're
finished, try logging on as that user to see how well
this user's permissions work.

Sharon F
December 6th 03, 09:59 AM
Not sure how wise it is to block IE in this way but to answer your
question... Press Shift when right clicking the file to add "Security" as a
choice in the right click menu. Or use Folder Options> View to turn off
simple file sharing; this will add the Security tab to the file properties
screen.

--
Sharon F
Microsoft MVP, Windows - Shell/User


Tinman wrote:
> I need help with keeping other users on my machine from
> accessing other programs. I have followed the artical
> about how to allow or disallow access to Internet
> Explorerwhere you can find the EXE and right click in it
> from the admin account and select the security tab and
> deny that user access to it. Ok my question is where is
> the security tab to set this??
> I am using XP pro and is connected to the internet via a
> wireless card. below is an artical I am following:
>
> ************************************************** ********
> "Prevent individual users from accessing anything on your
> machine"
>
> Search for executables Here's a great way to discover
> where any executable is stored on your system:
> 1. Make sure you're on the Desktop and then press F3 to
> launch the search menu.
> 2. Press the "All files and folders" link to enter your
> search terms.
> 3. Type "*.exe" (without quotes) in the search field.
> 4. In the "Look in" field set this to My computer.
> 5. Press the search button.You should see a list of all
> the executables stored on your system. Sort the list by
> name and go directly down to the IE icon, right-click on
> it, and choose "Properties." Add user to Groups and User
> Names list In IE's properties menu, select the security
> tab. You should see a list of users or groups under the
> heading "Groups or Users Names." If the user you want to
> deny access to IE isn't in the list, we need to add the
> person to it. To do this, just press the "Add" button.
> Here's how to add a user or group to the list:
>
> 1. In the field under the text labeled "Enter the object
> names to select," type in the user account name you'd
> like to add to the "Groups or Users Names" list. In my
> case, I just type the name Joey.
> 2. Press the "Check Names" button. You should see the
> name of the computer appear followed by a slash then the
> user account name. This means it found the user account
> you want to add to the list.
> 3. Press the OK button. Deny user from using program Now
> that you've added the user account to the "Groups or
> Users Names," single-click that user account to highlight
> it. While the user account is highlighted notice how you
> can edit the permissions for that account directly
> underneath the "Groups or Users Names" list. The default
> permissions for a limited account should always be set to
> read/execute and read only. For little Joey I'm now going
> to place a single checkmark in any of the boxes listed in
> the "Deny" column. Doing this will place checkmarks
> inside all of the permission entries in the list. The
> last step is to hit the "Apply" button and you're done,
> or, in little Joey's case, his surfing days are done
> until his grades improve. The search you conducted to
> find all the executables should still be open. If it is,
> go ahead and deny access to a different program for
> either the same user or a different one. When you're
> finished, try logging on as that user to see how well
> this user's permissions work.

Google