Re: Create New User Group and set permissions\limits

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Steve.

I am totally and permanent disabled, the computer is my way to the world.
The big thanks goes to you for challenging my mind doing research and trying
different approaches to my issue. You gave me a bunch of days of work and
thinking how or what to do with this computer with your answers and
suggestions. I can not mess this one up because of my wife. I do have one to
play with and if it goes down that is OK. I just try and put it back
together. Again thanks for the days you gave my mind some work

Dan


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:%23vrsl6oWFHA.580@xxxxxxxxxxxxxxxxxxxxxxx
> Hi Dan
>
> OK. It sounds like it may work well for you and that you are on track for
> success. I will leave it up to you as how to best handle family issues. I
> met Doug at a meeting up at Redmond last November. Thank you for your
> service to our country and it was an honor to help you! --- Steve
>
>
> "dan" <dm@xxxxxxxxxxx> wrote in message
> news:%23WMotXnWFHA.3716@xxxxxxxxxxxxxxxxxxxxxxx
>> Steve,
>>
>> Thanks, I have it now but have not applied it. It will let you apply some
>> Group Policy by user. All the users are in a window and I can chose a
>> user and change settings for that user only. It will not affect any other
>> user or group. I am disabled from the first Iraq war (Gulf War) the
>> family member that will change settings is my daughter I do not want to
>> have any conflicts or issues with her, I am just glad to be here. So I
>> would rather fix the computer so she can not do anything than fuss with
>> her, each day is a gift to me. My wife has the encrypted files as she is
>> still employed by federal government. I do not even have the
>> passwords\keys to them. Again thanks for all your help and advice. Sounds
>> like you may know Mr. Knox!
>>
>> Dan
>>
>>
>> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
>> news:OIwLOplWFHA.712@xxxxxxxxxxxxxxxxxxxxxxx
>>>I have looked at it in the past but never tried it out. If I remember
>>>correctly it can assign some Group/security Policy settings based on
>>>group membership for the local computer. I would definitely give it a try
>>>if you think it will do what you want. Doug has a great variety of tips
>>>on getting the most from XP and is a pretty decent pool player too. ---
>>>Steve
>>>
>>>
>>> "dan" <dm@xxxxxxxxxxx> wrote in message
>>> news:utK5mokWFHA.2692@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Steven, Glenn
>>>>
>>>> I also came across a small utility "Windows XP Security Console" by
>>>> Doug Knox at www.dougknox.com that looks like it will do most of what I
>>>> want. Have you seen this small program or know anything about it.
>>>> Thanks for you time.
>>>>
>>>> Dan
>>>>
>>>>
>>>> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
>>>> news:OvERJ%23bWFHA.796@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> On a stand alone computer Group Policy is not really meant to apply to
>>>>> different groups like it is in an Active Directory domain environment.
>>>>> There are a couple of hacks that you could try to exempt a group from
>>>>> Local Group Policy that normally applies to ALL users on a local
>>>>> computer. For this to work best you will want to configure Group
>>>>> Policy exactly the way you want it before you enable the hacks. Also
>>>>> for XP pro you can use Software Restriction Policies on a computer
>>>>> which are very powerful and by default local administrators are exempt
>>>>> from SRP. I would make sure that the "limited accounts" are only
>>>>> regular user accounts. You also should use ntfs permissions to
>>>>> restrict what folders a non admin user can access on your computer and
>>>>> what executables they can run. If you have a family member that
>>>>> refuses to cooperate I would consider barring them from using the
>>>>> computer and not give them a user account. You should beware that any
>>>>> user with malicious intentions that has full access to the computer
>>>>> could probably gain administrator access with a little knowlege. Using
>>>>> encryption with proper precautions can however prevent any user who
>>>>> does not have the private keys for decryption from accessing the
>>>>> encrypted files. The links below may lp. --- Steve
>>>>>
>>>>> http://www.jsifaq.com/sube/tip2400/rh2492.htm
>>>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;308418
>>>>> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
>>>>> http://support.microsoft.com/default.aspx?scid=KB;en-us;q300958
>>>>>
>>>>> "dan" <dm@xxxxxxxxxxx> wrote in message
>>>>> news:OxqX%23DZWFHA.1404@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>> Hello, I want to create a New User Group (Visitors) and set very
>>>>>> limited permissions\limits using Group Policy Editor. This is on a
>>>>>> stand alone computer running Win XP Pro sp2. I have family members
>>>>>> visit and use the computer but I do not want them to be able to
>>>>>> change setting or install programs. I want them to be able use the
>>>>>> internet and use Microsoft Office. I would create a new user account
>>>>>> (family) to add to the new group and it would only be in that group.
>>>>>> I know how to create the new group and the new account. I do not now
>>>>>> how to set permissions\limits using the Group Policy Editor for a new
>>>>>> group. I am a novice at doing any of this. I have "use simple file
>>>>>> sharing" unchecked. Can this be done for one group and then the
>>>>>> account could only use the computer for what I am looking for, is it
>>>>>> something I could do? I have an account and my wife has an account on
>>>>>> this same computer. There are some very sensitive files on the
>>>>>> computer which are encrypted with PGP, but I do not want the visitors
>>>>>> changing and looking all over the computer. We have one family member
>>>>>> that will look and change settings even after we ask her not to. I
>>>>>> would like an account in a group that would stop her and not have a
>>>>>> big issue. Just tell her use this one or none. Thank you for any help
>>>>>> or advice.
>>>>>>
>>>>>> Dan
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: OT: IBMs view on "Legacy Transformation" and how my philosophy parallels some of the keypoints
    ... > Hi Dan... ... Legal language isn't a black and white issue. ... Now it not "that networking" but "this ... changing its mind. ...
    (comp.sys.ibm.ps2.hardware)
  • Re: What SOBs are for sale by regulars?
    ... too much enjoyment out of it to give it up. ... Is it a for sale shed, bearing in mind I'm looking for something ... Sorry Dan, I'm not able to look anywhere near that so I can't even ... 1996 Kawasaki ZR1100 Zephyr ...
    (uk.rec.motorcycles)
  • Re: One thing that bothers me about this Karr kook
    ... It is as clear as day, as his poem talks ... about their laughing together. ... but if it wasn't a family member or someone very close ... Not for the amount of victims, mind you, but for the absolutely ...
    (alt.true-crime)
  • Re: A Victory Against Campus Extremism
    ... I am sure David won't mind my repoting it to you guys! ... And I hope Don will see how much hate is being perpetuated on-campus. ... Did you mean Don, or Dan? ...
    (soc.culture.jewish.moderated)
  • Re: Time Out of Mind vs Love & Theft
    ... Is this interview available anywhere on the Net? ... As a huge Dan Barn fan, ... > He answered that unlike most people, he likes Time Out of Mind better. ... > not sure if it's Dylanesque to cover a Jimmie Rodgers song these days. ...
    (rec.music.dylan)