On Thu, May 22, 2008 at 1:36 AM, Angus Scott-Fleming <[EMAIL PROTECTED]> wrote: > I have one client with one shared XP Pro computer where we want to allow only > one user to access the Internet, but for other reasons I can't enforce network > logins -- the system has some unique software that needs admin rights.
If the user has admin rights, they control everything about the computer. Anything you do, they can undo. One thing you may want to try is getting the program to run without admin rights. Sometimes all you need to do is relax NTFS permissions on some files, folders, or registry entries. Failing that, you could use something like sudowin to run just that program as admin. If not... your best bet is to put some kind of firewall between that PC and the rest of the network, and require a username/password to get past the firewall. The user won't have admin rights to the firewall, and thus won't be able to bypass it. If you don't want to do that... well, you could install some Parental Control software, but in my experience, if kids have admin rights, they will eventually find a way around that stuff. > Since the system is shared with admin rights, I can't stop the users from > bringing in a USB stick with Firefox Portable on it ... You could disable the USB mass storage driver. Of course, since the users have admin rights, they can re-enable it. Or use FTP.EXE to download Firefox. Or bring it in on CD. Or... Did I mention that giving untrusted users admin rights is not a good idea? :) -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
