Help in XP - Need to set account restrictions and such

[ctowle]

Hello all-

Here is a question I am having problems figuring out. Last year I built a PC for a relative, the typical 'family' PC. I had to install Me, XP was not out yet, and 2000 is limited on games that the kids want to play.


Needless to say, the kids have somehow managed to mess up Me. So today we went to BB and got them XP Pro. This is what I want to do, I have done some of it, but not all. I am sure there are registry keys I need to change.

The kids are 8 (B) and 11 (G), so they are not completely able to hack away at it yet. It will be a couple years down the road (HOPEFULLY)

Scenario:

Parents: Admin Priv.
Kids: Limited User Accout.

I want to the parents to have the power to do anything.
I want the kids to NOT have permission to do the following:

1. Write to just 'C:\' or root.
2. Access regedit.
3. Access to Program Files, read only, not write.
4. Access to C:\ Windows read only, not write.
5. No permission to install - GOT THIS COMPLETE.
6. Only be able to save in their own 'Chris' documents' folder or what ever, so that stuff is not scattered in random places over the HD. Limited to one folder.
7. Be able to somehow disable NAV 2002.
8. Do anything but use the mouse, keyboard and maybe print - just kidding, but that is what I am moving towards.
9. not access Roxio, I want the parents to be the only ones to burn. The kids have no idea how to use it, and went through a bunch of blank CD's one afternoon trying to figure it out.

I don' t want then DL crappy demos of everything and then installing them. I want to grant the parents some sort of control over what is installed. Actually, I know the parents will most likely say no, so this will default back to me to install what I see appropriate.


Thank you in advance. Please PM, email, or post any questions about details that I might have left out.

 

[jkoXP]

ok, i assume you made their user accounts already.
if you havent done this yet, goto my computer, goto tools, folder options, then goot the views tab, the option way at the bottom, you want that unchecked. now, you have a security tab option under the properties of a drive or a folder/program. you want to take remove all of the users XP put in there, add in the admin accounts and the kids accounts also, select what you want each account to be able to do.

with the demos, you need to set it so they cannot write to the disk, just read and execute. but you may want to give them a certain folder that they have write and modify permisions on also. if you goto advanced option under the sec. tab, and then edit permissions, theres even more options you could do then you can audit what those actions. cool huh? that means if they try to delete or add something it will tell you in the event log under admin tools. any other questions, PM me

 

[ctowle]

Thanks for the repsponse. That is doing what I want it to do.

Maybe this will work.

 

[Saltin]

gpedit.msc would be of some use to you as well. It allows you to set policy for the computer in regard to things like desktop/control panel/IE/ etc. Be aware that any policy change you make will effect all users on the box (including the admin).