Hello.
My sister dropped her laptop on the ground yesterday, and for her job, she needs to access the internet quite a lot.
I allowed her to mail on my computer in another account now while I'm at work.
How can I restrict her from accessing the hard drive, plugging in usb, run executables, change themes and that stuff?
She only needs the Opera browser.
I'm not that good with group policy
Thanks,
- JustCall
Hey JustCall,
Have you tried looking into Parental Controls?
How To Use Parental Controls in Windows 7
It may be a little simpler for you then reworking all the system permissions.
Although you can look at removing her user from the Users group, and then assigning specific permissions to her folders, which would prevent her accessing other files on the machine.
In fact -- User Rights Assignment - Add or Remove Users and Groups
Is probably what you should read through, it will help you to understand some parts of Group Policies.
The most basic thing for GP, don't change what you do not need to.
Make that account a regular user. She shouldn't be able to change anything of value to you.
She will need permissions on C to be able to function, but you can add the user to security and "deny" permissions for root of other partitions.
No need to mess with group policy, if too concerned make an image/backup.
Thanks, I'll look into the first method now and I'll let you know how it turns out.
No
Users cant access each others Users folders. Only administrators can, and then may need to change permissions.
Anything under C:\Users\youraccount is safe, add the deny permission to root of other partitions and they will be safe too.
Read this short article What is a standard user account?
There you go Enable, Disable File Download Option in Internet Explorer
Windows 7 IE has the same options
Quote