Restricting user access on Windows 2000 Pro

[SearchMaster]

I have several computers that I need to install some educational games for some very young kids (ages 3-5). I want to have a user logon with extremely limited permissions, such as just being able to launch the games but not delete shortcuts, etc. These computers were donated to our church with Windows 2000 Professional installed, so upgrading to XP is not a financially viable option. I set up three users (one with User rights, one with Power User rights, and one with Admin rights), but the User one still seems to be able to do more than I would like.

I have played around with GPEdit, etc., but I'm not real clear on what needs to be done. If you respond, assume I'm an idiot because just saying "set up user permissions" isn't going to help me much - I need details. I've done a bit of Googling but if someone can point me to a good guide or post other instructions here, it would be much appreciated.

And if I can get this done and have these dozen or so computers out of my house, my wife will love you forever.

 

[Smilin]

I would probably start with a guest account for 3-5 year olds. Add rights and/or permissions as needed if there are things that have trouble launching under guest.

 

[Psych]

Could you be a tad bit more specific about your exact situation at the Church? Is your computer on a network or anything? If it is, then you can tell the computer to get some program files (as well as the default desktop shortcuts) from a physically protected computer. If this will be too difficult, then the post above will probably be the best solution. I, though, do not like the guest account so I prefer using the users account while disabling permissions as needed. Default it to completely restricted, then ease up as necessary. I can give you more instructions later, and feel free to E-mail me at net4less@sbcglobal.net. I don't care if you bring spam or viruses or whatnot.

 

[Woodie]

GPEdit (for Group Policy Objects) will be of little use unless you have an Active Directory domain set up.