Suggestuons to lockdown user's desktop

[Spyder1000]

I've got an XP Pro machine and i'd like to be able to create a user account that can't do things like view or write to the C:\ drive. Can anyone suggest a location or book that contains helpful tips in account adminstration?

 

[remyvrs]

I tried to do the same thing by using NTFS on C drive and not giving any pemisions to the specified user but there apear problems and i give you a simple example: winamp makes a bak of the playlist if you open a file and for that it need the right to write in that folder... I'm not saing there are not solutions because in the case mentioned above you can instal the program on another driver and so on ... so on ... but it won't be that simple to configure each and every folder or program. The main idea is that it isn't bound to account administration as it is file and folder permissions!


It's nice to be important but it's more important to be nice.
Thanks for your attitude!

 

[linney]

http://mywebpages.comcast.net/SupportCD/SecureXP.html

The following article has these two paragraphs included which may be of use to you.

To assign user rights on your local computer.

To set, view, change, or remove permissions on files and folders.

http://www.microsoft.com/resources/...rv/2003/standard/proddocs/en-us/ctasks025.asp

It assumes you are using the much more secure NTFS rather than FAT32.

307881 - HOW TO: Convert a FAT16 or FAT32 Volume to NTFS in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;307881&FR=1&PA=1&SD=HSCH

Set your surfing user up as a Limited User so that any damage to your system is limited to a minute amount as compared to what occurs if you surf as an Administrator.

http://www.cert.org/homeusers/HomeComputerSecurity

http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=Markus+Jansson+security

Microsoft TechNet Security - Columns

http://www.microsoft.com/technet/community/columns/default.mspx

http://www.microsoft.com/technet/tr...ecurity/prodtech/Windows/Win2kHG/05SConfg.asp

http://www.microsoft.com/technet/Security/tools/default.mspx

If you are small network or home user there are not that many alterations that have to be made to Group Policy, most of what you need (and there are not many) will be found in -

Local Computer Policy/ Computer Configuration/ Windows Settings/ Security Settings.

http://www.theeldergeek.com/group_policy_for_windows_xp_prof.htm