XP Home user prvileges

  • Thread starter Thread starter kevin
  • Start date Start date
K

kevin

I have 2 kids with networked PCs in their rooms. They surf through a
proxy server (white list) and while they were using limited user accounts
I felt pretty safe. The problem was most websites they like to use
(cartoonnetwork.com etc.) would not run well without the ability to
install software.

As administrator account holders they enjoy the PCs
much more but I don't feel as safe. While I still have them going through
the proxy server (Connections tab is disabled in Internet Options) all
they need do is create a new account to circumvent my restrictions.

So my question is: is there a registry tweak to disable the creation of
new user accounts?

Thanks in advance!
 
kevin said:
I have 2 kids with networked PCs in their rooms. They surf through a
proxy server (white list) and while they were using limited user accounts
I felt pretty safe. The problem was most websites they like to use
(cartoonnetwork.com etc.) would not run well without the ability to
install software.

As administrator account holders they enjoy the PCs
much more but I don't feel as safe. While I still have them going through
the proxy server (Connections tab is disabled in Internet Options) all
they need do is create a new account to circumvent my restrictions.

So my question is: is there a registry tweak to disable the creation of
new user accounts?
Click to expand...

Look into either MVP Doug Knox's Security Console or the MS Shared Computer
Toolkit:

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

However, any administrator can create a new user account. Please understand
that these are technical responses to what is basically a non-technical
problem. This is a family/interpersonal issue that can't be solved by
technical means. You didn't mention the ages of the children involved, but
frankly, it would be better to talk to your children and teach them about
Internet safety.

http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron/archive/2006/02/05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on Rogue
Antispyware Programs

Malke
 
On Sun, 13 Aug 2006 12:46:26 -0700, Malke wrote:

[snip]
However, any administrator can create a new user account. Please understand
that these are technical responses to what is basically a non-technical
problem. This is a family/interpersonal issue that can't be solved by
technical means. You didn't mention the ages of the children involved, but
frankly, it would be better to talk to your children and teach them about
Internet safety.
[snip]

Malke
Click to expand...

Thanks for the links. Actually, I speak to them quite a bit about
internet safety. However, that knowledge can only take them so far and
won't prevent them from stumbling onto a news site that displays the
severed heads of suicide bombers, like I saw on foxnews.com's front page.
They are 7 and 11.

While I agree with you that communication is important I still think a
technical response is not inappropriate.

So, given that the XP Home GUI user controls are kind of ham-handed, I'm
sure there must be a way (in the registry?) to control privileges a little
more finely. I've Googled, looked in Kelly's Korner, but haven't found
what I'm looking for. Do you know a solution? I'd just like to either

* Disable user account creation on a per-user basis

* Enable the ability to install software in the limited user account.


Thanks!
 
Kevin

MVP Doug Knox has authored a neat utility that allows you to easily restrict access to dozens of different areas of XP. This works on XP Home as well as XP Pro. Have a look at it here.

Windows XP Security Console:
http://www.dougknox.com/xp/utils/xp_securityconsole.htm


--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


kevin said:
On Sun, 13 Aug 2006 12:46:26 -0700, Malke wrote:

[snip]
However, any administrator can create a new user account. Please understand
that these are technical responses to what is basically a non-technical
problem. This is a family/interpersonal issue that can't be solved by
technical means. You didn't mention the ages of the children involved, but
frankly, it would be better to talk to your children and teach them about
Internet safety.
[snip]

Malke
Click to expand...

Thanks for the links. Actually, I speak to them quite a bit about
internet safety. However, that knowledge can only take them so far and
won't prevent them from stumbling onto a news site that displays the
severed heads of suicide bombers, like I saw on foxnews.com's front page.
They are 7 and 11.

While I agree with you that communication is important I still think a
technical response is not inappropriate.

So, given that the XP Home GUI user controls are kind of ham-handed, I'm
sure there must be a way (in the registry?) to control privileges a little
more finely. I've Googled, looked in Kelly's Korner, but haven't found
what I'm looking for. Do you know a solution? I'd just like to either

* Disable user account creation on a per-user basis

* Enable the ability to install software in the limited user account.


Thanks!
Click to expand...
 
kevin said:
On Sun, 13 Aug 2006 12:46:26 -0700, Malke wrote:

[snip]
However, any administrator can create a new user account. Please
understand that these are technical responses to what is basically a
non-technical problem. This is a family/interpersonal issue that can't be
solved by technical means. You didn't mention the ages of the children
involved, but frankly, it would be better to talk to your children and
teach them about Internet safety.
[snip]

Malke
Click to expand...

Thanks for the links. Actually, I speak to them quite a bit about
internet safety. However, that knowledge can only take them so far and
won't prevent them from stumbling onto a news site that displays the
severed heads of suicide bombers, like I saw on foxnews.com's front page.
They are 7 and 11.

While I agree with you that communication is important I still think a
technical response is not inappropriate.

So, given that the XP Home GUI user controls are kind of ham-handed, I'm
sure there must be a way (in the registry?) to control privileges a little
more finely. I've Googled, looked in Kelly's Korner, but haven't found
what I'm looking for. Do you know a solution? I'd just like to either
Click to expand...

I already gave you the answer - Doug Knox's Security Center or the MS Shared
Computer Toolkit. Or upgrade to XP Pro.

Malke
 
Kevin

MVP Doug Knox has authored a neat utility that allows you to easily restrict access to dozens of different areas of XP. This works on XP Home as well as XP Pro. Have a look at it here.

Windows XP Security Console:
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
Click to expand...


Thanks to you and Malke. This utility lets me hide the control panel
which is more than I really wanted but on second thoughts probably is good
with elementary school-age users. Thanks again!


Kevin
 
Back
Top