Setting up permissions with multi user accounts

I am running windows xp pro from a home computer with multi users. I would
like to be able to set up permissions/user groups to allow adults to be able
to use programs which the children are not able to see or access. Can anyone
help me to do this is laymans terms? I have read several places which has
lots of info on how to do this - but I walk away scratching my head! Also,
how can I install a program such as an antivirus program for run for all
users in the "backround"? Norton wants everyone to scan thier files, but it
is set up to run for all users accounts anyway, so there is no need for it to
run under each user account. Thanks!

IndyNavy wrote:
I am running windows xp pro from a home computer with multi users.
I would like to be able to set up permissions/user groups to allow
adults to be able to use programs which the children are not able
to see or access. Can anyone help me to do this is laymans terms?
I have read several places which has lots of info on how to do this
- but I walk away scratching my head! Also, how can I install a
program such as an antivirus program for run for all users in the
"backround"? Norton wants everyone to scan thier files, but it is
set up to run for all users accounts anyway, so there is no need
for it to run under each user account. Thanks!

Set it up for multiple users and make your other users into limited users
instead of administrators. That way - if they need something installed,
they
come to you and they cannot randomly click on things and infect the whole
machine:

HOW TO: Create and Configure User Accounts in Windows XP
http://support.microsoft.com/kb/279783

HOW TO: Set, View, Change, or Remove Special Permissions for Files and
Folders in Windows XP
http://support.microsoft.com/kb/308419

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Windows XP is a multi-user OS, even when used by one person only, the
fundamentals don't change.

Documents and Settings is the directory that contains your user
information/documents/etc. It also contains a few extra directories used by
Windows.

One is "Default User" - This is used whenever a new account is created. It
bases the initial setup of that account off this directory.

Another is "All Users" - This is used by.. all users. If you want something
to appear on the desktop of every user of the machine, you put it on this
users desktop (in the desktop folder.) Etc.

Also, make sure you have all the other security features in place. Firewall
on and configured, antivirus setup and automatically updating/scanning
incoming emails, antispyware installed and periodically updated and used to
scan/immunize the system, antispam applications in place to help save your
children from getting 'questionable' email, etc. There is only so much you
can do - but if you don't do that you are only hurting yourself.

The Antivirus will likely show in the taskbar for everyone... But this is
not bad.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

1. Ditch Norton and get AVG. http://free.grisoft.com

2. To stop a program being run, assuming your disk is NTFS, then navigate to
the "Program Files" folder and find the subfolder for the program in
question. Right-click and select PropertiesSecurity. Remove the 'Everyone'
permission and add one for the users who do need to run the program (Tick all
except Full Control) Dont forget to include Administrator. And yourself!

Once done, any attempt to run the program from a disallowed account should
generate an error message. If you don't want this to happen then place the
program's shortcuts into individual user-profiles instead of the "All Users"
profile.

Note: In order to set user-rights you may first need to turn off 'Simple
File Sharing' otherwise the Security tab doesn't show.

http://www.practicallynetworked.com/...ring/index.htm

I have a similar situation. I am setting up a new computer for my son which
will be used by him and his wife (a single account with admin privileges) and
my two young grandchildren (ages 5 and 4) who run mostly children's programs
(I guess they would most probably be called games?). Anyway, I was
originally going to assign them limited accounts but I understand that there
is a problem running legacy apps. with limited accounts so I was thinking of
assigning them admin rights with heavy restrictions. Since this will be a
standalone computer, I understand that my options are rather limited.

Any thoughts/suggestions would be very much appreciated.

Thanks
Hank

"Shenan Stanley" wrote:

IndyNavy wrote:
I am running windows xp pro from a home computer with multi users.
I would like to be able to set up permissions/user groups to allow
adults to be able to use programs which the children are not able
to see or access. Can anyone help me to do this is laymans terms?
I have read several places which has lots of info on how to do this
- but I walk away scratching my head! Also, how can I install a
program such as an antivirus program for run for all users in the
"backround"? Norton wants everyone to scan thier files, but it is
set up to run for all users accounts anyway, so there is no need
for it to run under each user account. Thanks!

Set it up for multiple users and make your other users into limited users
instead of administrators. That way - if they need something installed,
they
come to you and they cannot randomly click on things and infect the whole
machine:

HOW TO: Create and Configure User Accounts in Windows XP
http://support.microsoft.com/kb/279783

HOW TO: Set, View, Change, or Remove Special Permissions for Files and
Folders in Windows XP
http://support.microsoft.com/kb/308419

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Windows XP is a multi-user OS, even when used by one person only, the
fundamentals don't change.

Documents and Settings is the directory that contains your user
information/documents/etc. It also contains a few extra directories used by
Windows.

One is "Default User" - This is used whenever a new account is created. It
bases the initial setup of that account off this directory.

Another is "All Users" - This is used by.. all users. If you want something
to appear on the desktop of every user of the machine, you put it on this
users desktop (in the desktop folder.) Etc.

Also, make sure you have all the other security features in place. Firewall
on and configured, antivirus setup and automatically updating/scanning
incoming emails, antispyware installed and periodically updated and used to
scan/immunize the system, antispam applications in place to help save your
children from getting 'questionable' email, etc. There is only so much you
can do - but if you don't do that you are only hurting yourself.

The Antivirus will likely show in the taskbar for everyone... But this is
not bad.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Ian, thanks for the information in this strand. I have been working on
learning as much as possible in using NTFS security instead of Simple File
Sharing. I only have two computers on my network at this time, but am wishing
to learn as much skill in this department as possilble as I have eight young
adult kids and a couple young grandchildren. I am wanting to learn how to
restrict an account I have created named 'Visitor's" as I do not want to
enable the Guest Account. I have been looking all over the Microsoft Site for
this information and have read Windows XP Inside Out several times from cover
to cover. If you could point me to additional resourses, either online or at
the local bookstore I would greatly appreciate it. I have also downloaded
several booklets on XP security, with or without a server. I am eager to
learn as much as possible and have made great strides. A little over a year
ago I had not computer experiance at all, (well some small remnants from a
college course years ago) due to using the only parental controls a windowed
mother of eight had at that time: Completely Removing the computer from my
home! My boys were getting into those x-rated sites and so I did what I had
to do. Anyway, I am eager to learn and hope you will have further ideas on
resourses. Thanks in advance if you see this post, as it is a few days old
now.

Seree


"Ian" wrote:

1. Ditch Norton and get AVG. http://free.grisoft.com

2. To stop a program being run, assuming your disk is NTFS, then navigate to
the "Program Files" folder and find the subfolder for the program in
question. Right-click and select PropertiesSecurity. Remove the 'Everyone'
permission and add one for the users who do need to run the program (Tick all
except Full Control) Dont forget to include Administrator. And yourself!

Once done, any attempt to run the program from a disallowed account should
generate an error message. If you don't want this to happen then place the
program's shortcuts into individual user-profiles instead of the "All Users"
profile.

Note: In order to set user-rights you may first need to turn off 'Simple
File Sharing' otherwise the Security tab doesn't show.

http://www.practicallynetworked.com/...ring/index.htm