Windows XP user accounts

[h7o]

I need to fine tune the settings for user accounts on my computer. The 'User' account type is too permissive for my needs.

I'd like to do things like remove access to the control panel, remove access to the internet, deny browsing through c:\, ban certain programs, ban executables from running, etc. Can somebody help me?

 

[spyordie007]

Than you're still probably best off starting with either a "user" or "guest" account (use guest only if you dont need the users to have saved local profiles).

From there you're going to have to do a bit of work tweaking it to act how you like. First off I would modify NTFS privilages on the root of the "C" drive so that users cannot browse it. After that I would focus on setting up security policies (group or local) to restrict executables from running; basically limiting the machine to only run the executables you specify.

Good Luck,

 

[talyn00]

use of the group policy editor can stop alot of that stuff, and then using tweakui

 

[h7o]

I found the group policy editor, but it affects all acount types and users. I'd want to set it so each individual has a different set of rules. How do I do that? BTW, how can I create Power Users? I know it's not part of the Users group, but at least it's a step down from the Admin level.

@talyn00

Thanks for the tweakui tip, never knew access controls was part of its list.

 

[h7o]

Bump

 

[nweaver]

gpo can modify user groups and what rights they have.