Solved Restricting other users from data.

[JustCall]

Hello.

My sister dropped her laptop on the ground yesterday, and for her job, she needs to access the internet quite a lot.
I allowed her to mail on my computer in another account now while I'm at work.
How can I restrict her from accessing the hard drive, plugging in usb, run executables, change themes and that stuff?
She only needs the Opera browser.

I'm not that good with group policy

Thanks,
- JustCall

 

[Windows Sniper]

Hey JustCall,

Have you tried looking into Parental Controls?
How To Use Parental Controls in Windows 7

It may be a little simpler for you then reworking all the system permissions.

Although you can look at removing her user from the Users group, and then assigning specific permissions to her folders, which would prevent her accessing other files on the machine.

In fact -- http://www.sevenforums.com/tutorials/202151-user-rights-assignment-add-remove-users-groups.html

Is probably what you should read through, it will help you to understand some parts of Group Policies.

The most basic thing for GP, don't change what you do not need to.

 

[GokAy]

Make that account a regular user. She shouldn't be able to change anything of value to you.
She will need permissions on C to be able to function, but you can add the user to security and "deny" permissions for root of other partitions.

No need to mess with group policy, if too concerned make an image/backup.

 

[JustCall]

Thanks, I'll look into the first method now and I'll let you know how it turns out.

 

[JustCall]

Make that account a regular user. She shouldn't be able to change anything of value to you.

Then she can still access my documents, right?

 

[GokAy]

No

Users cant access each others Users folders. Only administrators can, and then may need to change permissions.

Anything under C:\Users\youraccount is safe, add the deny permission to root of other partitions and they will be safe too.

Read this short article What is a standard user account?

 

[JustCall]

No

Users cant access each others Users folders. Only administrators can, and then may need to change permissions.

Anything under C:\Users\youraccount is safe, add the deny permission to root of other partitions and they will be safe too.[/url]

Ok, thanks!

I decided to go with the parental controls method because its more flexible, but after setting it up, the other account can still download files.
Is there any way to prevent that too?

 

[GokAy]

There you go Enable, Disable File Download Option in Internet Explorer

Windows 7 IE has the same options