Lock down win7 ultimate account from family whom are messing it up

[sevenxbmc]

hi guys,

I need to protect one of my win7 accounts as much as possible as my kids keep messing up settings or installing new software which tends to carry viruses. I have tried to use general parental control settings as well as hiding folders, but its kind of failed

I am familiar with microsoft management console and i'm hoping to utilise this to secure the account as much as possible

Is it possible to create an account where:-

1. I can limit the user to only be able to only be able to write to one folder for their own files?

2. The user cannot see/read/write any other folders, such as system files

3. The user cannot install programs without administrator rights

4. They can still use programs that i install such as messenger, msoffice, internet.

5. Their rights to see any network computers is totally disabled


I also need a recommendation for a program/app which can spy on them, so that i can keep an eye on them for social/media sites, but is not actually some virus. :shock:


Thanks

 

[seavixen32]

Did you use this tutorial?

http://www.sevenforums.com/tutorials/54397-parental-controls-allow-block-specific-programs.html

You need to make sure your administrator account has a really strong password, only use it to make changes to your computer, and then use a standard account for everyday use.

As for your children, the most I'd let them use is a guest account. They'll have to come to you for anything untoward and if you're not at home, tough, they'll have to wait until you are.

Have a look at this as well: http://www.livestrong.com/article/219780-how-to-track-childrens-computer-use/

 

[sevenxbmc]

thanks for your reply seavixen32.

Yes, i've used parental controls, but that is no good at stopping kids from accessing folders or files i don't want them to see.

The guest account, although restricted still does not block kids from messing about with the system files and is not an option mate.

I need help with utilising MMC

 

[James7679]

Do you have a "Live" account? I use Windows Live Family Safety to track and lock down my kids usage.

 

[sevenxbmc]

yes james, its a live account and windows live family safety is great, but what i need is a spying program which takes screenshots of local and internet programs and logs their keys etc.

 

[seavixen32]

I'm not over-familiar with MMC, suffice to say you need to decide which snap-ins your going to use with it.

I would have though if you want to seriously restrict what your children can do the Group Policy snap-in would be a good place to start.

 

[sevenxbmc]

thanks mate. Just need to figure out two things:-

1. How to setup GPO, so that kids can only see one folder as their root and nothing else.
2. Still need a name for a spy program

thanks again

EDIT: I thought i'd explain what i mean in question 1. Currently my kids can see C:\ drive and all folders below it, such as MY DOCS', KIDS, WINDOWS etc. I want them to be only able to see folder that i create for them as their ROOT in which they can then place any files they create:-

C:\KIDS

 

[seavixen32]

Have a look at this Google link and take your pick: how can i use group policy editor to restrict children's use - Google Search

And this one to monitor your children's computer use: http://www.google.co.uk/search?hl=e....51.51.0.5.5.0.181.3968.44j2.46.0.KGAw5tA6Ye0

 

[sevenxbmc]

thanks very much seavixen. I've found some useful info from that link, but i don't have the answer to my question regarding the "home directory" question.

 

[seavixen32]

thanks very much seavixen. I've found some useful info from that link, but i don't have the answer to my question regarding the "home directory" question.

Have a look at this tutorial: http://www.sevenforums.com/tutorials/151415-group-policy-apply-specific-user-group.html

If there is nothing in there, then Google is probably your best bet - just be very specific in what you search for to narrow the options.

 

[sevenxbmc]

thanks very much seavixen. I have found searched on google and have found that i need to switch on the share folders option and then i simply have to deny them access.

But then i'm worried about one thing and that is what if they access a site which requires access to for example C:\WINDOWS, C:\PROG' FILES, etc and the site cannot download any files due to me denying them access?

 

[seavixen32]

Then they will have to ask you to to temporarily lift the restrictions.

The bottom line is that you will be the arbiter of what they can download.

 

[sevenxbmc]

i understand mate. Just a pity...why didn't microsoft make a system where ALL windows folders/files were totally seperate from any programs...allowing me to then simply set the system folders to read-only.

 

[seavixen32]

Just remember, you're the boss and children have to learn the hard way!