Limited Access Accounts

[deloriagod]

Lately I've had some trouble with other people using my computer. I always left it logged in on the admin account since I had never bothered to make another. Well, everyone who used my computer had this thing about messing with my settings, changing my background, digging through my personal files, installing random crap that wastes HDDR space and possibly contains spyware/viruses, etc.. One person in particular would go running to my parents every time she found something she thought was inappropriate. So.. I created a limited access account for everyone but me to use. I put a password on the admin account (and made it private) so that nobody but me (or my brother if he needs to) can access it. I understand with limited access accounts, they can't see any of my files but they still have access to some of my programs. I logged onto the limited access account and noticed there were some programs that didn't show up on the list. So I have a few questions..

 

 

 

 

 

 

 

Is there a way to block certain programs so that the limited access account cannot use them?

 

 

 

 

 

 

 

Is there a way to block the limited access account from installing any programs?

 

 

 

 

 

 

 

Is there a way to block the limited access account from downloading things online?

 

 

 

 

 

 

 

 

 

 

 

Thanks, and I might have more questions as these people start messing with the new account. I'm sure they'll find new ways to piss me off..

[Collective]

You didn't mention your operating system, so I'll assume you're on XP.

 

 

 

 

 

 

 

Is there a way to block certain programs so that the limited access account cannot use them?

 

 

 

Depending on the operating system you can set file permissions so that only certain accounts can read/write/execute/etc.

 

 

 

 

 

 

 

On XP Professional you can access this functionality by disabling "Simple File Sharing" in Tools -> Folder Options within Explorer. On XP Home you must boot into Safe Mode and logon to the Administrator account.

 

 

 

 

 

 

 

Simply go to the Properties of a file or folder to set its permissions (under the Security tab).

 

 

 

 

 

 

 

Is there a way to block the limited access account from installing any programs?

 

 

 

 

 

 

 

Is there a way to block the limited access account from downloading things online?

 

 

 

For both of these I would recommend using the Microsoft Shared Computer Toolkit, which lets you put a whole range of restrictions on to different accounts with little to no fuss.

 

 

 

 

 

 

 

Edit: I should also point out that it would not be wise to change the permissions on system files.

[deloriagod]

Thanks Coll. Sorry I forgot to mention I'm on XP home edition.

[dsavi]

Nothing to submit, but, wow, that was good advice for a 1st post.