new login user

[9:35]

im trying to create a login user who has <i>very</i> limited access. this is what i'm trying to do. there are two logins right now, one has full access, and the other one is just hitting cancel. i'd like to make it so that hitting cancel with either go to the limited access user, or not even work at all.

the user i'm creating needs the following:
internet access with no downloading
limitation to only three programs

i also need a recomendation to a program which allows only a certain amount of time daily. i've heard talk of a few, but no specific mentions. whether freeware of software that needs to be purchased... whatever.

any help is greatly apreciated.

 

[Rapmaster]

install the System Policy Editor off the Windows CD (it's called poledit and its under "Power tools" or "Net admin" or something). You can install it from Control Panel --> Add/Remove Programs--> Windows setup tab

Log on as the user and run poledit

It allows you to make a list of exactly which programs can be executed (as well as control panel access etc).

Be careful though-- if you lock out running the poledit.exe program itself you will have a hard time changing things later. Also if you lock out registry editing and don't allow regedit.exe, you will also be limiting yourself.

Although the user (or you if you block yourself out) can just rename any .exe to one of the "allowed" names. So it isn't very secure but that's the best you can do under Win9x/ME.


As for hitting ESC to bypass login... there is a setting the "local machine" section (look around) that requires validation from network to allow login. That should give an error msg if they push ESC. (You don't need to actually have a network)

You should use the Microsoft Family Logon thing (network control panel) otherwise they can just type in any name and create a new account from the default settings. The family logon displays a list of all accounts and you must pick from one of them (instead of typing in an account name.) It's not exactly secure, but its ok for dealing with computer illiterate people who are only somewhat crafty. If you are actually on a network, I don't know if it will still work.

Or you can push ESC yourself and run poledit to set the settings for this "nobody" user (which I think becomes the default for any new accounts created).



If you want real security, you'll need Windows NT/2000/XP Pro

Everything I suggested here is easy to bypass if the person knows enough

 

[Rapmaster]

Internet access with no downloading is impossible... every time you view a page you are downloading it.

I know that you mean files, but that's really not possible under Win9x/ME without 3rd party software (and I don't know of any such software)

 

[9:35]

thanks a lot!

and yeah, i found a way to disable downloading - its in internet options.

 

[Rapmaster]

Oh... didn't notice that (under security settings)

The user can quite easily change that but--- it's at least as secure as the other insecure stuff I suggested

 

[Grimlock]

under NT4 it's possible to disable downloading of files,because the system admin at the college I used to attend did it, not that it stopped us though.