Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Keeping Users In Check

10 Jan 2011   #1
xyber

Windows 7 Home Premium 32bit.
 
 
Keeping Users In Check

Hi All,

I'm trying to find out if there is a way we can prevent users from creating/storing/copying/pasting files onto the root directory. This is because i want to prevent anything from writing itself there other than the system itself. Because most of the autorun viruses etc copies itself there. There are numerous viruses out there which does this. And at this present time, although majority of the anti-viruses can track them, we might never know if another way to circumvent anti-viruses watch and defenses can be formulated. This is the basis i'm looking for this specific way to block users from storing files on root drives. And yes i am aware that natively UAC does watch over these places which means without elevated privs, nothing can be stored there. But what good is security if the home owners welcome thieves in disguises?

Thank you for all inputs on this.

-Xyber.


My System SpecsSystem Spec
.
10 Jan 2011   #2
James Colbert

 
 

Hi xyber, and welcome.

You control user activity via limiting user accounts and permissions. Here are some links that should help you get started. Lots of reading:

Good link:

http://technet.microsoft.com/en-us/library/dd835546(WS.10).aspx

Good also:

Configuring Windows 7 for a Limited User Account

And a good, basic well written tutorial:

Permissions - Allow or Deny Users and Groups

Some links specific to requirements you may have:

group policy - How can I prevent users from installing software? - Server Fault

Prevent users moving folders

And finally, some searches:

windows 7 prevent users from creating/storing/copying/pasting files onto the root directory - Google Search

windows 7 limiting user accounts - Google Search

http://www.google.com/search?q=windo...x=&startPage=1

And a final link, which is only applicable to The Professional and above versions of windows, but an excellent read about the use of GPedit:

http://www.thewindowsclub.com/tag/group-policy

James
My System SpecsSystem Spec
11 Jan 2011   #3
mborner

Windows 7 Pro/32 Academic. Build 7600
 
 

The root drive is basically the PC, itself. Denying a user account the ability to create/store/copy/paste files would literally render the account useless. UAC is already set up to protect the computer and works great if set up properly. In other words, if the Administrator account is password protected and logged off, and a standard user account is being used by someone other than you, they would still need your password to run anything malicious, even non-threatening invitations.
My System SpecsSystem Spec
.

Reply

 Keeping Users In Check




Thread Tools




Similar help and support threads
Thread Forum
C:\Users\All Users\Start Menu - Access Denied !!!
How do I add custom items to the above folder ? I need to add shortcuts for our corporate ERP application.
Installation & Setup
program enables Use Check Boxes for all users
Hello All, I have a program that when installed on a Win 7 PC enables "Use check boxes to select items" for all users. The admin logon is unaffected, however any new user that logs on, sure enough it's enabled for them. So I'm assuming this is effecting the default user profile or something. (I...
Software
Keeping Standard Account Users out of the Administrators Account
I am about to start using Windows 7 Home Premium. As I understand it, a Standard user can install software if that user can provide a valid Administrator User name and password during the install process, when prompted by Windows 7. My question is, if you providide a Standard user with...
General Discussion
Hiding Users' files from Guest Users
As Administrator, Iíve created my own folders for my documents. These are located in the D: partition of my hard drive; and they are shown in the Library section of the contents of the computer, on the left. Now, when opening the computer from the Guest Account, my own folders do not appear...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 18:13.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App