Permissions question (convoluted)

  • Thread starter Thread starter Doug Kanter
  • Start date Start date
D

Doug Kanter

Just installed WinXP on my laptop (clean install, no other OS). Having a
problem with one little thing. First, here's what the machine does OK, and
what I need it to do:

1) Successful: Got it networked through a router to my office desktop
machine. Able to see laptop C-drive in its entirety on my desktop, and vice
versa. Only two machines connected this way, and that's all there will ever
be.

2) Successful: Laptop has web access via the router.

3) Laptop will occasionally be used by 2 other people at home, so I have 3
profiles: Mine (admin), and 2 others (not admin).

4) Desktop is part of a VPN setup to my remote company HQ, and laptop may
end up this way, too. This info's provided as background, in case it's
relevant to the next thing, below.

The two other home users are the type that tech support people dread, or
want to shoot. They flail with the mouse and delete things without knowing
why. They see error messages and dismiss them before writing them down. I
thought XP would provide the ability to keep these users from messing the
the entire C-drive, while still allowing them to mess up just what's in
their My Documents/My Pictures, etc folders.

But, if I log into their profiles, I find that they can hide/unhide/destroy
the entire C-drive contents (via My Computer). How do I deal with this? I
don't want them to be able to see, touch, smell or fondle anything but their
own folders.

One last thing: The desktop uses the same workgroup name as the machines I
access at my headquarters through the VPN. I used the same workgroup name
for the laptop because I assumed it had to be this way in order to access
the desktop. And, there's no domain assigned (yet).

So, how do I limit the users on this laptop?
 
Doug said:
Just installed WinXP on my laptop (clean install, no other OS). Having
a problem with one little thing. First, here's what the machine does
OK, and what I need it to do:

1) Successful: Got it networked through a router to my office desktop
machine. Able to see laptop C-drive in its entirety on my desktop, and
vice versa. Only two machines connected this way, and that's all there
will ever be.

2) Successful: Laptop has web access via the router.

3) Laptop will occasionally be used by 2 other people at home, so I
have 3 profiles: Mine (admin), and 2 others (not admin).

4) Desktop is part of a VPN setup to my remote company HQ, and laptop
may end up this way, too. This info's provided as background, in case
it's relevant to the next thing, below.

The two other home users are the type that tech support people dread,
or want to shoot. They flail with the mouse and delete things without
knowing why. They see error messages and dismiss them before writing
them down. I thought XP would provide the ability to keep these users
from messing the the entire C-drive, while still allowing them to mess
up just what's in their My Documents/My Pictures, etc folders.

But, if I log into their profiles, I find that they can
hide/unhide/destroy the entire C-drive contents (via My Computer). How
do I deal with this? I don't want them to be able to see, touch, smell
or fondle anything but their own folders.

One last thing: The desktop uses the same workgroup name as the
machines I access at my headquarters through the VPN. I used the same
workgroup name for the laptop because I assumed it had to be this way
in order to access the desktop. And, there's no domain assigned (yet).

So, how do I limit the users on this laptop?
Click to expand...

I assume you have XP Pro on the laptop. If not, you're definitely going
to need Pro because Home won't be able to join a domain and it will be
much harder to limit users. Basically, you're going to want to be sure
you all are logging in with passwords (Classic login mode) and that the
Administrator password is also a good one, not the default blank. Be
sure to keep track of it! Then log in as Administrator and go to
Start>Run and type "gpedit.msc" without the quotes. Now you will have
the Group Policy Editor. Go to the Users and Groups section and look at
all the options. Read them *very* carefully, because you can lock
yourself out with the Group Policy Editor! You can restrict your users
as you wish.

Malke
 
Then log in as Administrator and go to
Start>Run and type "gpedit.msc" without the quotes. Now you will have
the Group Policy Editor. Go to the Users and Groups section and look at
all the options. Read them *very* carefully, because you can lock
yourself out with the Group Policy Editor! You can restrict your users
as you wish.

Malke
Click to expand...

OK...once a week, I have a "stupid hour", and this may be it. Monday morning
is lasting into the afternoon.

There IS no "users and groups" section. What I see in the left pane is two
folders called Computer Configuration and User Configuration. Beneath each
of those are 3 options, Software Settings, Window Settings and
Administrative Templates. I've been carefully browsing these area and
nothing seems to apply to what I'm trying to do.

Any tips?
 
Doug said:
OK...once a week, I have a "stupid hour", and this may be it. Monday
morning is lasting into the afternoon.

There IS no "users and groups" section. What I see in the left pane is
two folders called Computer Configuration and User Configuration.
Beneath each of those are 3 options, Software Settings, Window
Settings and Administrative Templates. I've been carefully browsing
these area and nothing seems to apply to what I'm trying to do.
Click to expand...
OK, just for *you*, Doug (because you are so nice about asking) I
started up the XP box to be sure. Look under Administrative Templates
under the User Configuration. You will find *tons* of settings.
Left-click to select the items in the left pane and look in the right
pane. You'll see enough options to make you crazy. In the right pane,
double-click on an item to see more information about it and to make
changes. Again, be *very* careful in there. We do this sort of setup
all the time at schools, offices, etc. where you want users to have a
very limited range of things they can do. But even a Trained
Professional can make a mistake and wind up locking themselves out.

Hope that helped (and if you only have 1 stupid hour, you're lucky - I
certainly have my share of "brain freezes"!)

Malke
 
Back
Top