Microsoft Windows Vista Community Forums - Vistaheads
Recommended Download



Welcome to the Microsoft Windows Vista Community Forums - Vistaheads, YOUR Largest Resource for Windows Vista related information.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so , join our community today!

If you have any problems with the registration process or your account login, please contact us.

Driver Scanner

Customizing User Accounts

microsoft.public.windows.vista.security






Speedup My PC
Reply
  #1 (permalink)  
Old 06-14-2007
Aetherial
 

Posts: n/a
Customizing User Accounts
I need to set up a user in Vista with less permission than the standard user
account. For example, I don't want the user to be able to create ANY files
outside of the profile. I don't want the user to be able to change the
wallpaper or the screen saver. I need to limit the user's access to the
Control Panel more than usual.
Etcetera, etcetera.
How can I customize the account in this way?
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 06-15-2007
David Dickinson
 

Posts: n/a
Re: Customizing User Accounts
"Aetherial" <Aetherial@discussions.microsoft.com> wrote in message
news:B8F705AE-A98B-438B-BA8B-76EA24068DDF@microsoft.com...
>I need to set up a user in Vista with less permission than the standard
>user
> account. For example, I don't want the user to be able to create ANY files
> outside of the profile. I don't want the user to be able to change the
> wallpaper or the screen saver. I need to limit the user's access to the
> Control Panel more than usual.
> Etcetera, etcetera.
> How can I customize the account in this way?


Exactly how will this computer be used? Different methods are available for
different types of uses. For instance, a public computer needs more
restrictions than an office machine meant for sales people to keep their
records. In general, however, you can:

1) Create a custom user group. Make it a member of the User's group

2) Create the user, adding them to that group and removing that specific
account from the Users group.

3) In NTFS permissions for the Public folders and other folders to which the
Users group can write, use Advanced to deny the custom user group create,
append, and write permissions.

4) Use the group policy snap-in to limit other system options.

Will these less-than-standard users need actually to save documents
permanently? If not, then consider using the Guest account. Any changes
they make to the desktop will be forgotten when they log off, and you can
similarly use group policy to limit them even more from those parts of they
system that you don't want them in. However, if they need to save documents
permanently, you can create a special folder for them.

There are other things to consider in accomplishing what you want, too.
Hopefully, others will reply with their ideas. And if this machine is part
of a domain, the procedure is different.

I recommend consulting a professional for help with this. You might miss
something important or restrict too much.

--
David ****inson
eveningstar at die-spammer-die dash mvps dot org
Please reply only to the newsgroup, not by email.

Reply With Quote
  #3 (permalink)  
Old 06-15-2007
Aetherial
 

Posts: n/a
Re: Customizing User Accounts
I work at a public special-purpose lab attached to a university domain. We
are upgrading to Vista over the summer.
We are also changing the way the lab computers work with the university
domain. Currently, being attached to the domain on XP gives us problems
because users log in using their university account. We don't want them to do
this, so we are limiting domain access. Instead we are making a standard disk
image with the user accounts as we want them, then deploying that image among
all the lab computers.
We considered Guest accounts, but ultimately decided against it because we
need some files and application shortcuts always available, and because we
had problems with using certain system features as Guest. Instead, the
standard account runs a script from a local server which cleans out the
account info between uses. This will also be changed if we find a better
solution.
Essentially, the account I'm working on needs to be only somewhat more
relaxed than say, a public library or internet cafe. The main difference is
that we need a variety of applications to run without a problem on that
account.
Reply With Quote
  #4 (permalink)  
Old 06-15-2007
David Dickinson
 

Posts: n/a
Re: Customizing User Accounts
"Aetherial" <Aetherial@discussions.microsoft.com> wrote in message
news5DF8BEA-2FCE-42C1-9FA2-582BDA2350C3@microsoft.com...
> Essentially, the account I'm working on needs to be only somewhat more
> relaxed than say, a public library or internet cafe. The main difference
> is
> that we need a variety of applications to run without a problem on that
> account.


Then my original suggestion may suffice. But every time you login on the
machine as an administrator, you'll have to use the group policy object
editor snap-in to allow the administrator to do what needs to be done.
However, if you did use the Guest account, running the with software
elevated privileges and assigning a certain folder for saved data might
work. You can always set up the default user with the environment you want
for guests. It might be worth testing that configuration to avoid the
shortcomings of using the local group policy object editor and configuring a
special user.

--
David ****inson
eveningstar at die-spammer-die dash mvps dot org
Please reply only to the newsgroup, not by email.

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Re: User Accounts PA Bear microsoft.public.windows.vista.installation setup 2 06-10-2007 23:39
Standard user accounts can access files of other accounts??!! Ralf microsoft.public.windows.vista.administration accounts passwords 0 06-04-2007 11:53
User Accounts =?Utf-8?B?TXJLaXRl?= microsoft.public.windows.vista.administration accounts passwords 1 05-14-2007 20:20
User Accounts barry76 microsoft.public.windows.vista.administration accounts passwords 0 05-07-2007 19:45
Cant see user Accounts Devin Somerton microsoft.public.windows.vista.administration accounts passwords 0 04-01-2007 03:14




All times are GMT +1. The time now is 01:05.




Driver Scanner - Free Scan Now

Vistaheads.com is part of the Heads Network. See also XPHeads.com , Win7Heads.com and Win8Heads.com.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.6.0 RC 2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120