Managing user rights in XP

[sbrown02]

I have XP on a system with several users. I want to customize the programs each user can and cannot run when they are logged on. When I installed XP I set myself up as the administrator and everyone else with a limited account. I installed a bunch of programs while I was logged in with my administrator rights, but some of the programs won't run when the other users log in.

I've done some research and get the impression I need to go to the folder where the program resides (such as Musicmatch Jukebox), right click on the folder, select "Sharing & Security" and add the users on my system who will use this program. I've seen the window that should allow me to do this, but on my system I get a window that looks like the one attached, which does not give me the option to add users. What's going on and how do I enable these programs to run for my other users?

Thanks

[Statica]

Open windows explorer > go to TOOLS > Options > View tab

scroll to the bottom and uncheck Use simple file sharing.

[sbrown02]

I did this and I can now add/remove users from individual folders. But even after adding all users and giving them all rights to the Musicmatch Jukebox folders (all folders used by the program) it still won't run from a limited users session.

I read some other threads and someone suggested installing all shared programs under the "Shared Documents" folder. I haven't tried that yet, but it seems pretty stupid to have to do that. I'd have to go back an uninstall 10 - 15 programs, save the documents I've created and then reinstall and setup under these folders. Please don't tell me I have to do this to get it to work.

Any other suggestions?

Thanks

[andyms18a]

hi sbrown02
xp wont let users run a program unless its a Microsoft one unless they are power users
go to control panel admin tools computer management local users and groups then groups in the right hand side look for power users right click and add to group then add all users you want to be able to run non Microsoft programs to the power users group

next you have to put a short cut to the program on the all users start menu programs list open my computer then open the c drive open documents and settings open all users open start menu open programs and copy and past a short cut to that folder

[sbrown02]

Thanks andyms18a, this worked. What rights do power users have? Can I still limit a power user to not have access to other users personal folders, or to the Windows system folders, etc.? Do power user have the right to install programs? I hope not, as I don't want these users (my kids) installing programs at their whim and fancy.

And if the power user group does give users all the rights above that I don't want them to have, can I create my own group that allows legacy apps to run, but gives me the ability to limit other system attributes?

Thanks for the help.

[ja83]

One thing I figured out is(tell me if I am wrong) even when your using a limited account, you can still access ANY file on the HDD that you wanted. Just go into Documents and Settings folder, and it lists all the user accounts, and you can get into ANY folder you wanted. So if you don't want other limited users looking at your files, then your out of luck!!!

[DougL]

Surely when you are using xp with NTFS files system you should have the ability to limit access to files, i have the same problem, installed office xp on my new laptop running xp pro, but the limited accounts can not access WORD or EXCEL from their start menu. these programs just dont show up in the menu.

[Statica]

Originally posted by ja83 One thing I figured out is(tell me if I am wrong) even when your using a limited account, you can still access ANY file on the HDD that you wanted. Just go into Documents and Settings folder, and it lists all the user accounts, and you can get into ANY folder you wanted. So if you don't want other limited users looking at your files, then your out of luck!!!

That is a result of rather erratic behavior on XP. Personally I have never seen that happen. Are you using NTFS? You could also try to add deny priveleges to the directories you want to limit access to. In the security settings add an entry that says Everyone and deny all rights to the user - make sure that the user that can have access to it is already listed there with all access priveleges.

Originally posted by DougL Surely when you are using xp with NTFS files system you should have the ability to limit access to files, i have the same problem, installed office xp on my new laptop running xp pro, but the limited accounts can not access WORD or EXCEL from their start menu. these programs just dont show up in the menu.

Not having an item on the start menu and not having access to it are 2 entirely different issues. Can the user start up Word, Access etc? If the answer is yes, then its likely an issue with either the setup program not creating program icons in the correct place or one of your users moving the program icons.
Remember that with XP, there are 2 locations from which your start menu is created.
C:\Documents and Settings\All Users\Start Menu : Any program groups, icons, shortcuts within this will show up on EVERY user's start menu
C:\Documents and Settings\UserName\Start Menu : Any shortcut here will show up only on that person's start menu.
For your issue you may remove the particular shortcuts from C:\Documents and Settings\UserName\Start Menu to C:\Documents and Settings\All Users\Start Menu

[andyms18a]

hi sbrown02
have a look at this site for info on permissions under xp http://support.microsoft.com/default...b;en-us;304040

[DougL]

Hi Statica

I understand what you are saying, this must be an issue with XP, this is a brand new laptop and i loaded Office XP. I was just setting up the accounts for my daughters but on trying one i noticed that neither word or excel appeared in the start programs menu. i suppose i could have tried typing winword.exe in the run menu to see if i could access the program, its strange because Access, Frorntpage and powerpoint did show up.