Administrator ability to deny User acess to software programes?


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 05:40 AM
Perry
 
Posts: n/a
Default Administrator ability to deny User acess to software programes?

Greetings.

I note a lot of the queries in this forum are wanting increased access by
Users to programes installed by either the Administrator. What I am wanting
to know is how to restrict access to installed programmes (that I have
installed) to certain users? ie Children or generally nosey parkers.

The System is XP Home SP 2.

The option does not seem to be available to restrict access during the
install to particular users only, such as ADMIN only....

Iis there a way to retofit acess permissions or even that matter the ability
to see a programe within a Users account?

Thanks in anticipation
Reply With Quote
  #2  
Old 01-05-2006, 05:40 AM
Ian
 
Posts: n/a
Default RE: Administrator ability to deny User acess to software programes?

You can do this with filesystem-permissions, however I don't think XP Home
will allow you to make the necessary adjustments. The permissions exist,
provided it's an NTFS disk, it's just that XP Home has no controls for
setting them.


Reply With Quote
  #3  
Old 01-05-2006, 05:41 AM
Bruce Chambers
 
Posts: n/a
Default Re: Administrator ability to deny User acess to software programes?

Perry wrote:
> Greetings.
>
> I note a lot of the queries in this forum are wanting increased access by
> Users to programes installed by either the Administrator. What I am wanting
> to know is how to restrict access to installed programmes (that I have
> installed) to certain users? ie Children or generally nosey parkers.
>
> The System is XP Home SP 2.
>
> The option does not seem to be available to restrict access during the
> install to particular users only, such as ADMIN only....
>
> Iis there a way to retofit acess permissions or even that matter the ability
> to see a programe within a Users account?
>
> Thanks in anticipation



HOW TO Create and Configure User Accounts in Windows XP
http://support.microsoft.com/default...b;en-us;279783

HOW TO Set, View, Change, or Remove File and Folder Permissions
http://support.microsoft.com/default...;en-us;q308418

HOW TO Set, View, Change, or Remove Special Permissions for Files and
Folders
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q308419


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
Reply With Quote
  #4  
Old 01-05-2006, 05:41 AM
Bruce Chambers
 
Posts: n/a
Default Re: Administrator ability to deny User acess to software programes?

Ian wrote:
> You can do this with filesystem-permissions, however I don't think XP Home
> will allow you to make the necessary adjustments. The permissions exist,
> provided it's an NTFS disk, it's just that XP Home has no controls for
> setting them.
>
>



Actually, that's not entirely true; it's just a little hard to do in
WinXP Home. Rebooting into Safe Mode allows the WinXP Home user the
ability to set pretty much all of the same permissions as WinXP Pro in
normal mode. Further, there are 3rd party tools available to help. For
instance:

Windows® XP Security Console
Version 1.4 - 10/26/2003
Copyright 2003 - Doug Knox
http://www.dougknox.com/xp/utils/xp_securityconsole.htm


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
Reply With Quote
  #5  
Old 01-05-2006, 05:41 AM
Steven L Umbach
 
Posts: n/a
Default Re: Administrator ability to deny User acess to software programes?

In addition to the replies that suggest modifying NTFS permissions which is
a great idea you may want to take a look at the free Shared Computer Toolkit
from Microsoft that requires that you have SP2 installed. It uses
technologies usually not available in XP Home such as limited Group Policy
and Software Restriction Policies to lockdown a user account while not
interfering with what administrators or other users can do. --- Steve

http://www.microsoft.com/windowsxp/s.../overview.mspx --- Shared
Computer Toolkit

"Perry" <Perry@discussions.microsoft.com> wrote in message
news:479C53A4-AD6F-47DB-8B25-41CE6DDB886C@microsoft.com...
> Greetings.
>
> I note a lot of the queries in this forum are wanting increased access by
> Users to programes installed by either the Administrator. What I am
> wanting
> to know is how to restrict access to installed programmes (that I have
> installed) to certain users? ie Children or generally nosey parkers.
>
> The System is XP Home SP 2.
>
> The option does not seem to be available to restrict access during the
> install to particular users only, such as ADMIN only....
>
> Iis there a way to retofit acess permissions or even that matter the
> ability
> to see a programe within a Users account?
>
> Thanks in anticipation



Reply With Quote
  #6  
Old 01-05-2006, 05:41 AM
Perry
 
Posts: n/a
Default RE: Administrator ability to deny User acess to software programes?

Many thanks to Ian, Bruce and Steven for your prompt responses. It will take
me a little while to try each method and I may come back to this thread in a
day or so if I come up against a wall.

Cheers

Perry

"Perry" wrote:

> Greetings.
>
> I note a lot of the queries in this forum are wanting increased access by
> Users to programes installed by either the Administrator. What I am wanting
> to know is how to restrict access to installed programmes (that I have
> installed) to certain users? ie Children or generally nosey parkers.
>
> The System is XP Home SP 2.
>
> The option does not seem to be available to restrict access during the
> install to particular users only, such as ADMIN only....
>
> Iis there a way to retofit acess permissions or even that matter the ability
> to see a programe within a Users account?
>
> Thanks in anticipation

Reply With Quote
  #7  
Old 01-05-2006, 05:41 AM
Bruce Chambers
 
Posts: n/a
Default Re: Administrator ability to deny User acess to software programes?

Steven L Umbach wrote:
> In addition to the replies that suggest modifying NTFS permissions which is
> a great idea you may want to take a look at the free Shared Computer Toolkit
> from Microsoft that requires that you have SP2 installed. It uses
> technologies usually not available in XP Home such as limited Group Policy
> and Software Restriction Policies to lockdown a user account while not
> interfering with what administrators or other users can do. --- Steve
>
> http://www.microsoft.com/windowsxp/s.../overview.mspx --- Shared
> Computer Toolkit
>


I'd forgotten about that tool. Thanks for covering my omission.

--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
Reply With Quote
  #8  
Old 01-05-2006, 05:43 AM
Beemer Biker
 
Posts: n/a
Default Re: Administrator ability to deny User acess to software programes?

"Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
news:eDXVukiDGHA.740@TK2MSFTNGP12.phx.gbl...

SNIP

> HOW TO Create and Configure User Accounts in Windows XP
> http://support.microsoft.com/default...b;en-us;279783
>
> HOW TO Set, View, Change, or Remove File and Folder Permissions
> http://support.microsoft.com/default...;en-us;q308418
>
> HOW TO Set, View, Change, or Remove Special Permissions for Files and
> Folders
> http://support.microsoft.com/default.aspx?scid=kb;[LN];Q308419
>


Bruce: I ran across the above reply when searching for "set file
permissions": How can I set permissions programatically using either
windows scripting or C++

eg: I want to make a script (or file on a local computer) read only for
"Authenticated User" and read/write for a certain administrator.

I can easly do this by right clicking on the script and selecting the
security tab. I have had trouible even finding this topic under platform
sdk, msdn and .net 1.1

...thanks..



Reply With Quote
  #9  
Old 01-05-2006, 05:44 AM
Bruce Chambers
 
Posts: n/a
Default Re: Administrator ability to deny User acess to software programes?

Beemer Biker wrote:
> "Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
> news:eDXVukiDGHA.740@TK2MSFTNGP12.phx.gbl...
>
> SNIP
>
>
>>HOW TO Create and Configure User Accounts in Windows XP
>>http://support.microsoft.com/default...b;en-us;279783
>>
>>HOW TO Set, View, Change, or Remove File and Folder Permissions
>>http://support.microsoft.com/default...;en-us;q308418
>>
>>HOW TO Set, View, Change, or Remove Special Permissions for Files and
>>Folders
>>http://support.microsoft.com/default.aspx?scid=kb;[LN];Q308419
>>

>
>
> Bruce: I ran across the above reply when searching for "set file
> permissions": How can I set permissions programatically using either
> windows scripting or C++
>
> eg: I want to make a script (or file on a local computer) read only for
> "Authenticated User" and read/write for a certain administrator.
>
> I can easly do this by right clicking on the script and selecting the
> security tab. I have had trouible even finding this topic under platform
> sdk, msdn and .net 1.1
>
> ..thanks..
>
>
>



Look into CACLS.EXE /?

For more detailed scripting advice, you'll have to seek out a scripting
newsgroup. I do very little scripting, myself.

Script Center
http://www.microsoft.com/technet/scr...r/default.mspx


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
disabled user accounts amrbackup Windows XP Security Admin 2 01-05-2006 03:51 PM
My words Panda_man Windows XP New Users 4 01-05-2006 02:53 AM
Delay opening folders caused by dcom server process launcher service None Windows XP Help and Support 5 01-05-2006 02:46 AM
Long delay before Drives & Files appear in My Computer & Address Bar shizzlenizzlator@gmail.com Windows XP Help and Support 3 01-05-2006 02:44 AM
Windows error message Glo Windows XP Basics 41 01-05-2006 02:04 AM


All times are GMT. The time now is 08:28 AM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

Administrator ability to deny User acess to software programes?