Re: Restrict user Access



dawnvk wrote:
I had someone ask me how to do this on Win 2000 and felt like I was brain dead. It's so not intuitive like XP. What they want to do is have only the administrator be able to use email (outlook) and get on the internet. And they don't want other users to be able to view each other's files when they're logged in. In XP, you just click, keep my files private - done. Can someone point me to some info on how to do this in Win 2000 - I can't remember or find it.

When I logged in as one of the "restricted" users and told it not to allow IE or Ourlook or told it to disable the LAN, it did that for EVERYONE. What's the point of profiles if you can't do different things for different profiles?

Can someone please refresh my memory as to how this works in 2000.


First log on as an Administrator. A Restricted user should not be
allowed to alter permissions on programs. To change this is a little
involved. Go to the Program Files folder, right click and then click
Security tab. Uncheck 'Allow inherited properties from parent...'.
Then Remove all categories and Add back Administrator and Users. Apply
then go to 'Advanced' and check 'Reset permissions on child objects...'
and apply. 'Allow inherited properties from parent...' should remain
unchecked.

As far as Outlook and IE are concerned find Internet Explorer folder.
Right click the folder then click security tab. Remove 'Users' category
leaving Administrators. Make sure 'Full Control permission' is checked,
then apply. Do the same for Outlook/Outlook Express Folder.
Administrators will now only be able to use the internet.

To restrict access of a user's files to that user alone go to Documents
and Settings. Right click on the user's folder and uncheck 'Allow
inherted properties from parent...'. Then Add back that user's profile
name from the user list. Make sure 'Full Control permission' is checked.
Click Advanced then check 'Reset permissions on child objects...'
ensuring that 'inherited parent permissions'option stays unchecked.
Repeat procedure for each user.


.



Relevant Pages

  • Re: User Account Suddenly Unaccessable
    ... Revert to the original profile folder. ... Log on as administrator ... The Sharing tab has "Do not share this folder" checked, and the rest of the tab has no data. ... In the middle section none of the "permissions" categories have any checkmarks - no marks in allow, ...
    (microsoft.public.win2000.general)
  • Re: Do not have accessibility to change certain file names
    ... ownership and permissions supersede administrator rights. ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)
  • Re: User Account Suddenly Unaccessable
    ... Revert to the original profile folder. ... Log on as administrator ... The Sharing tab has "Do not share this folder" checked, and the rest of the tab has no data. ... In the middle section none of the "permissions" categories have any checkmarks - no marks in allow, ...
    (microsoft.public.win2000.general)
  • Re: User Account Suddenly Unaccessable
    ... Modify the registry so that it points at the correct folder. ... - Log on as administrator ... The Sharing tab has "Do not share this folder" checked, ... In the middle section none of the "permissions" categories have any ...
    (microsoft.public.win2000.general)
  • Re: Access Denied: backed-up Documents and SettingsUser
    ... ownership and permissions supersede administrator rights. ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)

Loading