Restricting Windows XP Accounts



Dave
07-09-2005, 11:14 PM
Hello,

I'm placed in charge of managing a computer lab at an elementary school
(Windows XP Pro). What I'm looking for is a way to create a limited user
account where I can limit Control Panel access and prevent users from
installing applications. I also want to customize the desktop and start menu
appearance of these accounts. I would also like to be able to do this at home
to prevent unauthorized users (i.e. kids) from installing programs on my
computer. I am left, however, with the connundrum of how can I log on to the
restricted account to change these settings when the account itself is
restricted? Is there an optimal solution for easily creating and managing
limited user accounts from an admin-level account without actually having to
log on to that account? And conversely, is there a way to install an
application from the restricted account AS an administrator?

Thanks

glenn fincher
07-09-2005, 11:14 PM
"Dave" <Dave@discussions.microsoft.com> wrote in message
news:7BF1EBEB-D72D-48C1-AED4-F20180906063@microsoft.com...
> Hello,
>
> I'm placed in charge of managing a computer lab at an elementary school
> (Windows XP Pro). What I'm looking for is a way to create a limited user
> account where I can limit Control Panel access and prevent users from
> installing applications. I also want to customize the desktop and start
> menu
> appearance of these accounts. I would also like to be able to do this at
> home
> to prevent unauthorized users (i.e. kids) from installing programs on my
> computer. I am left, however, with the connundrum of how can I log on to
> the
> restricted account to change these settings when the account itself is
> restricted? Is there an optimal solution for easily creating and managing
> limited user accounts from an admin-level account without actually having
> to
> log on to that account? And conversely, is there a way to install an
> application from the restricted account AS an administrator?
>

I believe that you will find some of what you are looking for a the BLOG of
Aaron Margosis here:

http://blogs.msdn.com/aaron_margosis/default.aspx

Look particularly at the sections on running as limited admin for home users
as well as the excellent other information. Also, Microsoft may have just
what you are looking for in the currently in beta "Shared Computer Toolkit"
that is talked about at several places on the web such as:

http://bink.nu/Article4015.bink

Though this isn't out yet, and the only information we have is what is
available in the computer press, it sounds like it will fit the bill for
your work and home needs once it is released.

Hope this helps!

Glenn Fincher

Anando [MS-MVP]
07-09-2005, 11:14 PM
Hi Dave,

MVP Doug Knox's utility is probably ideal for you.

http://www.dougknox.com/xp/utils/xp_securityconsole.htm

--

Anando
Microsoft MVP- Windows Shell/User
http://www.microsoft.com/mvp
http://www.mvps.org

In memory of Alex Nichol
http://www.microsoft.com/windowsxp/expertzone/meetexperts/nichol.mspx

Folder customizations
http://newdelhi.sancharnet.in/minku

Protect your PC!
http://www.microsoft.com/protect


"Dave" <Dave@discussions.microsoft.com> wrote in message
news:7BF1EBEB-D72D-48C1-AED4-F20180906063@microsoft.com...
> Hello,
>
> I'm placed in charge of managing a computer lab at an elementary school
> (Windows XP Pro). What I'm looking for is a way to create a limited user
> account where I can limit Control Panel access and prevent users from
> installing applications. I also want to customize the desktop and start menu
> appearance of these accounts. I would also like to be able to do this at home
> to prevent unauthorized users (i.e. kids) from installing programs on my
> computer. I am left, however, with the connundrum of how can I log on to the
> restricted account to change these settings when the account itself is
> restricted? Is there an optimal solution for easily creating and managing
> limited user accounts from an admin-level account without actually having to
> log on to that account? And conversely, is there a way to install an
> application from the restricted account AS an administrator?
>
> Thanks

Derick Campbell \(MSFT\)
07-09-2005, 11:16 PM
Hi Dave,

A Public Beta of the Shared Computer Toolkit has just become available at
http://www.microsoft.com/sharedaccess.

I believe it will handle everything you want to do. If not, let me know in
our Shared Access Newsgroup:
news://news.microsoft.com/microsoft.public.windows.sharedaccess.

Cheers,

Derick Campbell
Program Manager for the Shared Computer Toolkit


"Dave" <Dave@discussions.microsoft.com> wrote in message
news:7BF1EBEB-D72D-48C1-AED4-F20180906063@microsoft.com...
> Hello,
>
> I'm placed in charge of managing a computer lab at an elementary school
> (Windows XP Pro). What I'm looking for is a way to create a limited user
> account where I can limit Control Panel access and prevent users from
> installing applications. I also want to customize the desktop and start
> menu
> appearance of these accounts. I would also like to be able to do this at
> home
> to prevent unauthorized users (i.e. kids) from installing programs on my
> computer. I am left, however, with the connundrum of how can I log on to
> the
> restricted account to change these settings when the account itself is
> restricted? Is there an optimal solution for easily creating and managing
> limited user accounts from an admin-level account without actually having
> to
> log on to that account? And conversely, is there a way to install an
> application from the restricted account AS an administrator?
>
> Thanks


Restricting Windows XP Accounts