Locking down Win XP Pro

[compudog]

I have a machine on the production floor that needs four separate accounts (1 for each shift foreman.) Windows XP Pro. They all need to be able to access a few Excel spreadsheets and Word Docs. They need to be able to read and write these docs. I don't want account A to be able to read B, C or D's documents and vice-versa. When I set up limited accounts, everything works as expected, but there are no write permissions to the shared docs in the shared folder. They can only save with a new filename. Each shift needs to update the same docs so everything stays in synch. Currently, each account, A,B,C and D all are set as system admin. This works, but each person can open docs in the other's accounts. I have set each account's My Documents folder to be private. Any ideas how I can make this work. THis PC is stand-alone, has not network or Internet access. Thanks!

 

[Nothinman]

Put them in a common group and give that group write access to the shared docs folder.

 

[compudog]

Thanks for Nothinman.. I'll try it out tomorrow.

 

[mechBgon]

If you think any of them might think of trying the "underground" Administrator account, then also give that account a password (right-click My Computer > Manage > Local Users & Groups > Users, right-click the Administrator account and set its password).

 

[compudog]

Thanks mech, I do have the Administrator account locked down with PW already, today I was logged on a User "A" ran a seach (*.xls) and was able to open up all documents created by B, C and D. I will try these suggestions tomorrow. Thanks for the advice!

 

[imported_JFG]

You could use EFS, but it's risky. Make sure you keep a backup of the keys. Or you could instruct your users to password protect their documents.

Maybe best to put deny access on A's directory & deny B,C & D. Then do the same for the others