Re: Private folders

Tech-Archive recommends: Speed Up your PC by fixing your registry

nguser wrote:

I share a computer with three users. It is my computer and two of the
other users have Administrator privileges.

Only Administrator should have Administrator privileges, no other accounts
should be set to Administrator. Administrator should not be used for
anything except system configuration and maintenance. Setting daily,
normal use accounts to Administrator leaves your system much more open to
malware, malicious content on websites and in email, and good old fashioned
user error. System security is your friend: Don't deliberately disable
it.

Although I do not want to prevent them from adding/removing programs

Yes, you do, unless you trust them enough to have the Administrator
password. Installing programs means installing malware as well, whether
through conscious effort or by accident. Forcing them to use Administrator
eliminates accidents.

and accessing some shared files,

File permissions are your friends.

I do not want to let them into My Documents folder. I tried removing all
the user names except mine from the security tab of the My Documents
Properties.[...]nothing prevents them from going into the security tab and
taking ownership of the folder, thus accessing my files.

Administrators bypass most security permissions, so this is operating
exactly how you misconfigured it to by giving administrator rights to
normal user accounts to begin with.

When I log in as them, although initially access is denied to
the other Administrators,

Either they told you their password, or there is no password on those
accounts. All accounts should have strong passwords set. Accounts with no
password are a security risk, especially accounts with Administrator
rights.


--
Posted via a free Usenet account from http://www.teranews.com

.

Relevant Pages

  • Re: Domain Admins and Anonymous Logon Group
    ... ACL on all security principals (users, groups, and machine accounts) present ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: (plz read Jupiter Jones) Adminstrator/Limited User Security Issues
    ... If the users are Limited Users, all accounts have their own passwords, ... file system is NTFS and Administrator sets permissions. ... Then set permissions and no one should be able to change the ... > administrator account be able to allow/disallow security ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ADMINISTRATOR vs Administrator User
    ... when run on an administrator account. ... As to getting past the limitations imposed by WindowsXP ... There are very few - very very few - modern applications that require ... user accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: Administrator IE6 connection
    ... See: http://mvps.org/winhelp2002/unwanted.htm Also note the security tips on ... to one of the forums listed below. ... > administrator profile but not with my user profiles. ... I have the ADMINISTRATOR plus two other accounts set as ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Re: Administrator restricted - Control Panel Missing
    ... If you did not specifically set up Group Policy to restrict access to ... The command net users will display user accounts and net user username will ... type of administrator. ... the control panel was missing. ...
    (microsoft.public.windowsxp.security_admin)