Re: How to restrict program access in guest account?

From: Kelly (kelly_at_mvps.org)
Date: 05/25/04


Date: Tue, 25 May 2004 00:19:21 -0500

Start here:

To enforce file and folder security, boot the computer in Safe Mode and log
in to the built-in Administrator account. Once there, open Windows
Explorer and locate the file/folder you wish to restrict. Right click and
select Properties. Go to the Security tab. Here you can add/remove Users
and Groups, and either grant access to the file/folder, or deny access to
it.

Doug's Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Disable or Enable Downloads per User in IE (Line 254) right hand side
http://www.kellys-korner-xp.com/xp_tweaks.htm

Restrict Users from Running Specific Applications
http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict

Use Access Control to Restrict Who Can Use Files
http://www.microsoft.com/windowsxp/pro/using/howto/security/accesscontrol.asp

Add or Remove Programs Restrictions

These restrictions apply to the Add/Remove Programs feature of Control
Panel. They allow you to entirely or individually disable components.

Go to Start/Run/Regedit and navigate to these keys:

Per User

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Uninstall

Per System

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Uninstall

NoAddRemovePrograms - Disable Add/Remove Programs
NoRemovePage - Disable Change and Remove Programs
NoAddPage - Disable Add Programs
NoWindowsSetupPage - Disable Windows Components Wizard
NoAddFromCDorFloppy - Hide "Add a program from CD-ROM or disk" option
NoAddFromInternet - Hide "Add programs from Microsoft" option

Create a new DWORD value for each restriction required according to the
above. Set the value to equal "1" to enable the restriction or "0" to
disable it.

You may need to restart Windows for the changes to take effect.

-- 
All the Best,
Kelly
Microsoft-MVP Windows® XP
2004 Windows MVP "Winny" Award
Troubleshooting Windows XP
http://www.kellys-korner-xp.com
Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm
"Ulric Van Bergen (UVB)" <ithinknot@youwish.com> wrote in message 
news:ctAsc.12450$eH1.6323504@newssvr28.news.prodigy.com...
>I want to create an account for visitors to use that will allow then
> internet, games, and Office programs and nothing else. I want to make sure
> that they cannot mess with my computer. I have had people accidently crash
> my computer because they didn't know what they were doing. I want to
> prevent this. I have my admin account very well protected, but I want
> another account that will give them very limited access. Thanks
>
>
> UVB 


Relevant Pages

  • RE: [in] Re: [Full-Disclosure] IE is just as safe as FireFox
    ... The first account created on Windows is Administrator, ... and even it had poor initial security when it was really tested. ... doesn't require admin either). ...
    (Full-Disclosure)
  • Re: Need help closing security holes in my Windows XP home system!
    ... >>stop using the win xp user account with admin, ... >>windows as the admin, ... then you really don't understand security for the ...
    (comp.security.firewalls)
  • Re: Home Networking/Firewall problem
    ... security design flaws. ... which open windows. ... Sebastian calles this an "attack vector", ... Add an extra user account. ...
    (comp.security.firewalls)
  • Re: what is reset account?
    ... No I don't think that policy value was available in Windows 2000. ... I believe the policy was added in K3, but the reg value works in 2K as well as NT. ... windows 2000 server security options. ... deployed based on computer account. ...
    (microsoft.public.win2000.active_directory)
  • Re: Logon with disabled admin account possible!
    ... Microsoft MVP (Windows Server System: Security) ... > disable the built in administrator account. ... >> possible to disable the built-in admin account - you could rename ...
    (microsoft.public.windows.server.security)