Limited account .... Too free

  • Thread starter Thread starter TOMMY
  • Start date Start date
T

TOMMY

I have 2 accounts in my XP , Administer and Limited.
I myself use the first and the second is for my brother. I know he can not
access my files as far as they are in "My Document" folder in a NTFS
partition.....this fine....but how can I avoid him deleting some important
windows files and registries....he is so crazy...he always threats me by
saying:"Today you wont see your dear Mr. XP like before, because you didn't
do that for me "
and blablabla...
I have tried guest account for him ,but it has got the same freedom for a
jerk user....
How can I avoid him accessing those important files and folders (without
hiding them...cause he knows that too)
Any software for that? Any suggestions? Any tool in XP that
I don't know?
(Also he can install a lot of games and harmful sofware without
administrative privileges in his free world )

Your help is much appreciated
Best Regards
 
Any software for that? Any suggestions? Any tool in XP that
I don't know?
Click to expand...

I know that it's not the answer that you're looking for, but if you really
can't trust him then the only answer is not to give him ANY access to the
machine. Someone with physical access to the machine (especially if they
have a login of some kind), will be able to cause damage if they're
determined enough.
 
Go to run and type in gpedit.msc Here you can set certain
permissions for limited user... you will like.
 
I am not clear about that... also there should be some easier ways to limit
someone's acces to files and folders.....the thing that i am not aware
of...
 
Limited accounts shouldn't be able to modify any system files. They are
only supposed to be able to write to their My Documents folder.

--
Check out http://www.kellys-korner-xp.com for amazing tweaks and fixes

Member of "Newsgroups are for everyone" (Perdita X. Twitt is a
self-appointed, self-righteous, ruthless, bitchy net-cop too!)

Email address is fake to prevent SPAM.
Real email address is pcyr2000 AT hotmail DOT com
Change the obvious to the obvious.
 
Oh ya, forgot about that.

--
Check out http://www.kellys-korner-xp.com for amazing tweaks and fixes

Member of "Newsgroups are for everyone" (Perdita X. Twitt is a
self-appointed, self-righteous, ruthless, bitchy net-cop too!)

Email address is fake to prevent SPAM.
Real email address is pcyr2000 AT hotmail DOT com
Change the obvious to the obvious.
------------------
 
Buy a removable harddrive like they have in training centers and take it
with you
and tell him that there will be NO DAYS that he will see your dear Mr. XP.

Tell him to quit being a cheap bastard and buy one.
 
I have 2 accounts in my XP , Administer and Limited.
I myself use the first and the second is for my brother. I know he can
not access my files as far as they are in "My Document" folder in a
NTFS partition.....this fine....but how can I avoid him deleting some
important windows files and registries....he is so crazy...he always
threats me by saying:"Today you wont see your dear Mr. XP like
before, because you didn't do that for me "
and blablabla...
I have tried guest account for him ,but it has got the same freedom
for a jerk user....
How can I avoid him accessing those important files and folders
(without hiding them...cause he knows that too)
Any software for that? Any suggestions? Any tool in XP that
I don't know?
(Also he can install a lot of games and harmful sofware without
administrative privileges in his free world )

Your help is much appreciated
Best Regards
Click to expand...
My step-father used to threaten my computer ( to throw it away in my
case ). I simply explained to him that if anything happens to my system,
he would no longer have his Water Skiis ( VERY important to him )

Find something important to your brother and explain to him that if
your system is damaged, so, will that important item of his.

David
 
Ok, so you want to setup a user with limited acces on your PC
You are using NTFS which is the real solution here.

If you have 1 drive in your PC, then great! Else, repeat these steps for
each hard drive
Right click on C drive, goto properties and select Security. Add his
account and yours.
Make sure your account as FULL acces to everything else you can lock youself
out!

Remove Everyone
Change his account so that he has access to everything but is unable to make
modifications (Virtually read only)
Apply this change to Every file, folder and subfolder so that it will affect
everything on your PC

You will need to watch be careful here as now he is strictly read only and
windows can not update his settings from here on out. I do not know what
the impact is from doing this as it is a rather broad and extreme way to
limit access.

My other suggestion would be to change his profile to a mandatory profile so
that any work he does will dissapear after he logs off. I have not worked
with mandatory profiles enough to know what the user can and can not save so
this may not be your solution either.

You can also use a GPO but this does affect everyone on that machine. You
can block yourself out as well unless you know how to remove the local GPO

Then there are 3rd party utils to secure per user but I do not know of any
tools off hand

-Karl
 
Back
Top