Win2000 Administration

[bravo261]

hey guys,

got a problem that i'm sure you guys can field quickly here. my computer is a win2k pro machine, and i have some people that use it occasionally. how do i fix it so that they can not access certain drives and programs? i only know about that documents and settings folder where you add or remove links in the all users/administrator/"xxuser" folders, but that can only be a bandaid fix. please help!

thanks

bravo

[[Oc]acaridans]

The easiest way to do this would to make a login for them, you can restrict what they have access to that way.

[pcgirl]

Right, make them their own login and if you really want to lock the machine down, go into control panel and under administrative tools, open local security policy. There you can place restrictions on all kinds of things.

[bravo261]

thanks for the replies. i did create different logins for each person. but each user can still click on the c: drive(boot drive) and tinker around files and programs. this is preventable using the control panel logged in as administrator? a quick run down please. thanks for the help everyone

bravo

[pcgirl]

If you want to keep people out of the c: drive, you can set up what are called NTFS permissions on it. in my computer, right click on the c: drive, choose properties, and then choose the security tab. That security tab is where you can set permissions and keep people out.

[Wa11y]

Or you can just straight up remove sharing on the C:\ drive. It defaults to shared. If you don't want to remove the sharing, you can change the permissions under the sharing tab, and the secuirty settings under the security tab. Right click on the drive and select "Properties" to get to both of those tabs.

[bravo261]

i still can't get it to work guys. i'm tried all your suggestions. i logged in as administrator, and created a few accounts and listed them as "guests." I want to hide the c drive from them and not let them touch a damn thing except for what i put in the start menu. i right clicked the c drive and took off sharing, and that did not work. users could get in and delete/access everything. then under the "sharing" tab, i put everything to "deny" for every type of user, and nothing. the only thing i got was to disable the installation of programs. Please help me out some more guys!!

bravo

[alan]

If you go to Administrative Tools then Computer management then open the help file...there are multiple ways of customizing what you want who to use on your computer.

There are too many to list, but I'm sure you can read them for yourself.


Good luck.

alan

PS.. If you learn something...share it with me, as i don't know what the Hell they are talking about!LOL

[el]

I have the opposite problem! LOL

I use win2k server sp2 and I have created other users for another computer in my domain I can't seem to load programs as any user other than the Administrator. now the user is a member of every Administrators and domain controllers and everything else but I still can't install stuff on the other box only on the primary domain controller. what the heck am I missing here.