Restricted XP user

[ledbetter]

I want to create a new user in Windows XP that has only have access to a few things:
Certain Folders
Certain Applications (like winamp & VLC)
Wont be able to install or delete any other applications.

I have no clue how to do this and will need a lot of help/links.

Thanks

[Razer]

Well to begin with, are you willing to use multiple user accounts on your PC? This means that at login, you will have to go through the schlep of selecting your account and typing in a password.

Now I'm not sure about this for all programs, but I'm pretty sure that most programs ask you to choose to install for 'anyone who uses this computer' or 'this user only'. Choosing the latter, you'll install apps like Winamp which will then have unique settings and music lists for that user.

Now, to create a new user, you need to do the following:

1. Right-click on My Computer
2. Choose 'Manage'
3. Choose 'Local Users and Groups
4. Choose 'Users'
5. Right-click on the white space under the listed users and select to create a 'New User'
6. Define the user
7. Right-click the user you just created and choose 'Properties'
8. Select the 'Member Of' tab. You wanna make sure the user does not have Admin rights, must not even be a Power User.
9. I think the new user might already be defined as a 'User' but if not, click 'Add' and type in "Users" - click the 'Check Names' button


<<edit>> Ok I just tested this, a newly created User will already be defined as 'User'. So just select that this user must change his password at next login or, login to this account, install the apps, then log out, log into your Admin account, using the Computer Management console, select that the user must change his password at next login.

Possible issues:

I don't know how long your current profile on your PC has existed and how you've chosen to do past installs. If you've chosen 'for anyone that uses this computer', the new User account will still be able to access your apps. So you may need to uninstall and reinstall (Google this please!).

What's covered:

New User account cannot install or delete; Has access only to certain applications; one can also enable Quota Management under your drive's properties to give this user his own space. I have not used this feature though so cannot offer much advice, except where to find it.

More complicated:

To secure certain folders, allow read access only, or no access altogether, you'll need to define the Security Settings for that folder. Do this by right-clicking on the folder and selecting 'Properties' then 'Security'. Choose the Group or User names BEFORE playing around with the Permissons. BE CAREFUL HERE as you don't want to lock yourself out of the folder! Play around with the permissions for that user, log out Admin account, login to User account and test. Mess around till you're happy.

I hope this helps you achieve part/all of what you want to do. Wolvebain and Tirion will most definitely be able to add more, so post feedback here if you get stuck.

Cheers,
Razer

* Subject to edits and corrections later! *

[Zizzy]

Don't you mean that you want to create a user that just isn't a administrator!? Cause, that user only have acces to few things. Or else, just create a normal user and install WINGUARD PRO! hehe...

Edit, I see Razer beat me to it. hehe...

[ledbetter]

Thanks for the quick replies and I will test it at home tonight.

I currently use the admin account to access everything on my home PC. The problem is, it is also a media centre that some of my friends use. I just want them not to be able to mess around on my system or install unwanted programs. Access to music, movies, etc is ok, but the installation of new games/programs is a no go.

I will also choose the pwd and make sure that they will not be able to change it. Thanks for the warning on folder permission and I will make test folders first to "play" with it.

(The possible issues of certain apps being open for all accounts will be a problem, but I will sort it out later.)

[ledbetter]

I also found this link and will see how it works tonight.....hopefully it's idiot proof.....

Microsoft Shared Computer Toolkit for Windows XP
http://www.microsoft.com/windowsxp/s...s/default.mspx