securing computer with password

[hobey19]

hey guys,
is there a way to set up xp so that whenever someone wants to download a file, it asks for a password? also, i would like to disable some things in the start menu (ie run commands, command prompt). and i was wondering if there was a piece of software that would allow windows to automatically restore itself to the way it was that morning so no changes can be made during the day. working with xp pro on the computers. thanks a lot. o and as far as disabling stuff in the start menu, i would also like to have to enter a password to acess them rather than completely disable them. help is much appreciated. thanks

craig

[hobey19]

if anyone can just point me in the direction of a good registry site, that would be helpful. i have worked in the registry before, just need something to reference to find some of the stuff i want. thanks

[pam123]

Can't help you with the registry stuff but if you assign yourself as administrator and give other people user/guest accounts in XP they will not be able to install, change, etc. any programs at all.
You can also lock them out of programs you don't want them using, like command prompt.
You needn't disable the programs just decide what programs the users will be able to access.

[hobey19]

alright, thanks, i will try that. appreciate the help. what about downloading stuff (any way to disable that so user has to enter password). this is the thing that i am most interested in.

thanks
craig

[pam123]

As administrator you are the one who decides what priviliges the other users will have.
If you want to prohibit downloads then do so.
If your comp will only occassionally be used by others then set up a 'guest' account which will also prohibit downloads.

[hobey19]

well i don't want to prohibit downloading, i just want to have it password protected. is there any way of doing this? if i have to i will just prohibit it outright, i i don't want to. thanks

craig

[pam123]

You already have as much control as you want.
Nothing can be installed on a computer running XP except by the administrator.
So any download is useless until you say otherwise.

[Trent Steel]

I don't understand why you need a password for downloading. You can set up a user account with password protection for people you want to let download stuff, and use the guest account to prohibit downloading for everyone else.

So you get the same effect, can only dowload with a password, only difference is that the password has to be supplied at log-on not when actually downloading the file.

[hobey19]

yeah, i guess that will work. thanks guys. my teacher at my school asked me to secure her network becuase she teaches a tech class. problem is, the kids spend too much time downloading kazaa and other stuff just to try it out than doing any work. but she does need to be able to download occasionally. thanks for the help

craig

[TwoRails]

Hope I didn't miss it above, but how do you actually set these privileges and controls of other users? I've looked but can't find any clue... That may help hobey19 as well....

[pam123]

Given hobey19's description I'm assuming one comp.
The teacher is recognized at the initial install as the admin with full priviliges ( and she heeds XP's request for a password).
When XP is installed, and any other programs she'll be using, it's time to go to control panel and set up user accounts ( User Accounts is the last icon ).
Set up the new account, label it 'students' ( if you have 15 kids you will need a general account ) and set the priviliges.
The kids save their work to floppy or CD-RW disks, depending on what you're doing.
The settings will prevent them downloading Kazzaa and the required software for schools will keep them off porn sites.
That's it.
It's not ideal so any budding John Carmacks will have to break into the school after hours or have their own home PCs.

[lil Jimmie]

To be honest with you a computer lab for a Tech class with Internet access to the students desktops is really not wise. The only desktop that should have access to the Internet is the instructors. This is just my opinion of course. BTW a student with a guest or limited account can still get to the registry and make changes if he or she knows how.

[hobey19]

actually there are ten computers, and one of the things i need to block is the registry for the students. one of the kids thinks he know what he is doing but has caused me to reformat the computer becuase he decided he was going to test out the tweaking he wanted to do at home on the schools computer first. i agree lil jimmie but the problem is that we make the school web page as well as movies so the internet is kind of important. so as long as i make them a limited account, i should be set right? and i have found a way to disable stuff like the registry, but i still want the admin to be able to get into it if need be. so i just wanted to know if those tweaks get rid of it for everybody, or is it possible to specify the user? o, and there are no budding Carmacks, no one has real anti-security skills, its just they like to mess around. if they do something, it is by luck, not skill. thanks for the help.

craig