I want to create a very limited user that can only use the internet (and maybe a few programs such as open office if possiblde) and have no access to any data. It seems like trying to customize this "option by option" but this leaves a lot of security holes and is very time consuming. I remember seeing windws NT sytems that were just like user terminals with internet and a few programs. No access to any data drives.
parental controls are a start. but they leave a lot of the files visable on the data drives, but the files cant be opened. I am trying to get the point where the user could not even search the files or directories.
I was researching and it sounds like there was something called guest mode, which allowed this, but it has ben removed from my version of windows 7 ultamite
If you wish to make the data files inaccessible to your restricted user, this can be done using file permissions but it will take some work.
what you need to do is remove all their rights from the files / folders concerned, this is complicated due to the inherited rights that are in place
go to the root folder of the data you wish to hide, in the advanced security tab make sure that the "apply to subfolders ... " option is checked, but the "Inherit from parent... "option is not checked, this may generate a warning which should be accepted.
remove the entries completely for all users or groups that you want to not allow access. This should include the everyone group plus any other general group for users, retain the rights for the administrator group, system, and any other user that needs access (including yourself)
when this is applied it will cascade down the folder tree. It works by denying the basic rights to view and navigate folders
Warningremoving the access for the everyone group without giving explicit permissions to at least one user can lock you out of these files completely. if this happens the hidden administrator account can be used to assign rights
Quote