Windows 7 guest account simplification

[Edduck]

Hey everyone,

I am staying at my family home for a bit of holz by the sea, only problem is my pc is connected to the adsl now and of course my whole family wants to use the net.... So I am getting annoyed with them always wanting to know what I am up to on the net and I would kill to have a simple guest account that would only allow firefox to start up and a few other basic apps. Now I have a little experience with the local/group policy editor and setting the allowed/denied security settings for folders but what I need is way beyond this.

If you can picture this: You click on the guest account icon, win 7 loads up and immediately Firefox takes focus. Windows explorer is restricted to the guest My documents folder and shared media drives (Homegroup, media server and pics etc). Programs cannot be installed/uninstalled, no system settings changed (i.e. no admin rights, User account control i hope not the solution...), start menu only has limited access to Accessories and Office.

NOW PLease I hope someone out there can help me with this cos this actually sounds like a huge job....

I know at my varsity pc areas they had these consoles which when logged in only had what I described above so it must be possible...

 

[Edduck]

Ok I think I just found my solution. I first created a secure guest account by following this advice: http://technet.microsoft.com/en-us/magazine/ff687018.aspx I then found this nifty service that has only appeared in Windows 7 call Applocker http://www.windowsecurity.com/articles/Securing-Application-Execution-Microsoft-AppLocker.html and damn is it easy to use and powerful!! I can do everything I need without having to fiddle with policy editors. It uses a simple wizard. I am busy now with severely limiting the guest account. I'll report back later (thats if I don't manage to lock myself out my pc....)