User Rights in Windows XP

[BobtheCkroach]

I've been working on this for a day now, and it just dawned on me that I hadn't asked the smartest people I know - my Gamemecca buddies! So here goes...

I just got a computer running Windows XP for my little brother. He's only 10, and as such, my dad does not want him to have access to anything outside our local network (ie, no internet, no pop3, no chatting, etc)...I have my little brother set up as a "Limited Account" and I have an administrator account for myself. I would like to be able to allow the admin access to the internet, while not allowing limited users access. Denying access to the internet is the most important part - w/o the internet, he can't sign up for e-mail, can't get a chat program, etc, so as long as I can at least block HTTP access, that'd be enough. Is there anyway to do this?

[Die Hard]

Yes, you can set permissions through your Admin rights. Take a look once your logged in. I can't remember where (i'm at work) but it's there :thumbs:

[BobtheCkroach]

Yes, you can set permissions through your Admin rights. Take a look once your logged in. I can't remember where (i'm at work) but it's there :thumbs:

I spent all day "taking a look" and got nowhere... :P I'm asking where to look...

[JIMINATOR]

run gpedit.msc
look at local computer policy, user configuration, admin templates, network, network connections.

really though i don't see anything useful.
if the computer makes a connection such as dialup or pppoe, then these connections are easy to lock.

anyway, you may find it easier to nuke the explorer links from the desktop and menus of that acct, otherwise it will probably require some sort of software solution.

[BobtheCkroach]

run gpedit.msc
look at local computer policy, user configuration, admin templates, network, network connections.

really though i don't see anything useful.
if the computer makes a connection such as dialup or pppoe, then these connections are easy to lock.

anyway, you may find it easier to nuke the explorer links from the desktop and menus of that acct, otherwise it will probably require some sort of software solution.

Alright, I already looked at that stuff, I didn't find anything useful either. Ideally, I'm looking for a more permanent solution than that (you can still *technically* get IE by going into Prog Files), but that might have to be the solution...he's a good kid, so if we take it off the desktop/menu and tell him he can't use the internet, i have no doubt that he'll listen...but dad wanted me to be as sure as possible.

Thanx Jim!

[JIMINATOR]

ok, i have your hookup!!!!!
Open C:\Program Files\Internet Explorer folder
right click in iexplore.exe, properties, security
"add" your brothers login
set read and write to deny

[BobtheCkroach]

ok, i have your hookup!!!!!
Open C:\Program Files\Internet Explorer folder
right click in iexplore.exe, properties, security
"add" your brothers login
set read and write to deny


Brilliant! I'll try it tonight when I get home! Thanx Jim!

[BobtheCkroach]

ok, i have your hookup!!!!!
Open C:\Program Files\Internet Explorer folder
right click in iexplore.exe, properties, security
"add" your brothers login
set read and write to deny

only one problem...when I right click on IE, and hit properties...there's no security tab...is that something added in SP2, b/c if so, i'm screwed b/c my bro's comp jams everytime I try to install SP2 (it's a 500 MHz pII or pIII)

[JIMINATOR]

cheeze man, go back and look at the instructions.... :wacko:

[JIMINATOR]

btw, if you don't get a security tab, go back and turn off simple file sharing (tools, folder options, view, simple file sharing box)

(don't know if this is supported on xp home, probably not....)

[BobtheCkroach]

btw, if you don't get a security tab, go back and turn off simple file sharing (tools, folder options, view, simple file sharing box)

(don't know if this is supported on xp home, probably not....)

That did the trick (I'm using Pro)...Thanx Jim!!!