Amending Start menus

[John M Carter]

I would like to set up my WinXPProf system so that I (as administrator) have
a Start menu (accessible from Start, All Programs, which contains
everything, but that Guests when they sign on have access only to files and
programs which I designate. Can I do this simply by deleting entries in the
Guest start menu (available when right clicking Start and selecting 'explore
all users'? Can I move/delete/amend any of these entries without fear of
messing things up? I'm not sure why but I seem to have 6 'users' with their
own settings i.e. Administrator, Administrator.------ (my computer name),
All Users, Default User, Guest, and my normal login name. Can I delete those
I don't want? Many thanks

 

[Malke]

I would like to set up my WinXPProf system so that I (as
administrator) have a Start menu (accessible from Start, All Programs,
which contains everything, but that Guests when they sign on have
access only to files and programs which I designate. Can I do this
simply by deleting entries in the Guest start menu (available when
right clicking Start and selecting 'explore all users'? Can I
move/delete/amend any of these entries without fear of messing things
up? I'm not sure why but I seem to have 6 'users' with their own
settings i.e. Administrator, Administrator.------ (my computer name),
All Users, Default User, Guest, and my normal login name. Can I delete
those I don't want? Many thanks

It is normal to have accounts for all of those system users. Leave them
alone! Do not use the Guest account; it is not meant for when you are
feeling hospitable. It is meant to allow someone who does not have an
account on the local system to sit down at the computer, log on and do
work. The account has elevated privileges and is therefore a security
risk. Most people leave the Guest account disabled by default.

Instead you should make a new account and call it Visitors (or the
like). Make it a Limited account and arrange the Start Menu the way you
want. The entries in the Start Menu are only shortcuts.

Malke

 

[John M Carter]

It is normal to have accounts for all of those system users. Leave them
alone! Do not use the Guest account; it is not meant for when you are
feeling hospitable. It is meant to allow someone who does not have an
account on the local system to sit down at the computer, log on and do
work. The account has elevated privileges and is therefore a security
risk. Most people leave the Guest account disabled by default.

Instead you should make a new account and call it Visitors (or the
like). Make it a Limited account and arrange the Start Menu the way you
want. The entries in the Start Menu are only shortcuts.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Thanks for that. So far so good but I notice that when the Visitor signs in
they have access to all my programs via the Start button. I want to prevent
them having access to certain file, like my accounts program for instance
and my diary. How can I do this?

 

[Guest]

Thanks for that. So far so good but I notice that when the Visitor signs in
they have access to all my programs via the Start button. I want to prevent
them having access to certain file, like my accounts program for instance
and my diary. How can I do this?

Hi John,
Go to this link and read the instructions to assign Permissions to Files and
Folders:
http://technet2.microsoft.com/Windo...7ed0-457e-956a-25bb4ebd067f1033.mspx?mfr=true
Hope this helps
nass

 

[Malke]

Thanks for that. So far so good but I notice that when the Visitor
signs in they have access to all my programs via the Start button. I
want to prevent them having access to certain file, like my accounts
program for instance and my diary. How can I do this?

Log into an account that has Administrative privileges (probably your
own). Right-click on the Start Button and choose "Explore All Users".
Now you'll get the familiar two-paned Explorer interface showing all
users' Start Menus. Expand the Start Menu for the Visitor account and
delete any entries for programs you don't want Visitor to see.

If you want to go further in limiting the Visitor account you can since
you have XP Pro. Turn off Simple Sharing in Folder Options>View and set
fine-grained permissions for user accounts and groups. Use the Group
Policy Editor to set policies - Start>Run>gpedit.msc [enter]

Be careful using the Group Policy Editor since it is completely possible
to lock *yourself* out inadvertently. For questions about Group Policy,
post in its newsgroup: microsoft.public.windows.group_policy

Here are some additional links which can help you:

How to disable Simple Sharing and set permissions on a shared folder in
Windows XP (Pro only)
http://support.microsoft.com/?kbid=307874

HOW TO: Set, View, Change, or Remove File and Folder Permissions in
Windows XP
http://support.microsoft.com/?kbid=308418

How to apply local policies to all users except administrators in a
workgroup setting in Windows 2000 (works for XP too) -
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

Malke

 

[Larry Gardner]

I also did this (setting up a Visitor), but I really locked the user down -
totally.

This is what I did:

1. Opened C:\Documents and Settings\All Users\Start Menu\Programs and moved
all Folders and Files I did not want ALL USERS to use, and placed them in
the Start Menu|programs of the users I want to have them (remember, they are
just short-cuts).

Now all that's left is what you want ALL USERS to get ... the users you
moved the short-cuts to, get everything.

I also turned off access to most of Start Menu items (anything you don't
want them to be able to go to).

I then set the bit to prevent that user from seeing My Computer. So whn
Windows Explorer comes up, all that's there is from their My Documents on
down. Cannot access (manually) drives, partitions, control Panel, ....

I did this when I created a The Gamer user account on my system. All the
user can see in All Programs is Games. Everything else is gone. Has no
access to Internet applications, Drives, Control Panel, Administrative
tools, ...

I also removed Log Off from Start Menu, so that user cannot switch to user
accounts.

Thanks for that. So far so good but I notice that when the Visitor
signs in they have access to all my programs via the Start button. I
want to prevent them having access to certain file, like my accounts
program for instance and my diary. How can I do this?

Log into an account that has Administrative privileges (probably your
own). Right-click on the Start Button and choose "Explore All Users".
Now you'll get the familiar two-paned Explorer interface showing all
users' Start Menus. Expand the Start Menu for the Visitor account and
delete any entries for programs you don't want Visitor to see.

If you want to go further in limiting the Visitor account you can since
you have XP Pro. Turn off Simple Sharing in Folder Options>View and set
fine-grained permissions for user accounts and groups. Use the Group
Policy Editor to set policies - Start>Run>gpedit.msc [enter]

Be careful using the Group Policy Editor since it is completely possible
to lock *yourself* out inadvertently. For questions about Group Policy,
post in its newsgroup: microsoft.public.windows.group_policy

Here are some additional links which can help you:

How to disable Simple Sharing and set permissions on a shared folder in
Windows XP (Pro only)
http://support.microsoft.com/?kbid=307874

HOW TO: Set, View, Change, or Remove File and Folder Permissions in
Windows XP
http://support.microsoft.com/?kbid=308418

How to apply local policies to all users except administrators in a
workgroup setting in Windows 2000 (works for XP too) -
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"