windows xp limited access user account

[naeem]

Hoping someone with windows xp (or 7) experience can offer some pointers.

IDEA
- have a notebook bolted to a table, loaded with various ebooks and audio lectures for students
- students can plug their USB stick and copy whatever they wish

Problem
- guest (or user account) must not be able to delete, rename or move any files
- only have access to these folders/files. No access to settings on the pc


Something like the Freedom Toaster http://www.freedomtoaster.org/ - dont see their software or OS available so unsure about that.

 

[Totempole]

AFAIK on XP, a Guest or Limited account can't delete or edit files that weren't
created on that specific account.

Therefore, if an "Administrator" creates the files (or files are loaded onto the PC
by an Administrator) the Guest or Limited User won't be able to delete the files.

There are however a few things that Guest and limited accounts can do: While
they can't change any crucial system settings, they can change settings
associated with their profile. i.e Wallpaper, Desktop Appearance etc.

They can also create files and add programs to the computer. Whatever a limited
user adds to a computer, that same user has the privileges to delete.

The only other issue you will run into is that students won't be able to plug in
their own flash drives, since each flash drive is a new piece of hardware and
limited users don't have the privilege to add new hardware to the PC.

 

[WPD]

Have a look at Cybera http://sourceforge.net/projects/cybera/.

While it's designed to lock down and manage Internet cafe PCs, it sounds like it'll do all you are looking for.

 

[mercurial]

You can also try looking at Group Policies/Local Security Policies under Control Panel -> Administrative Tools.

 

[naeem]

thanks! Will experiment with group policies

 

[BigAl-sa]

Best bet is to clone the image once a day (get rid of viruses from said flash drives).

I did use some software which could lock down the desktop through policy settings, but for the life of me can't remember what it was called. You still need to clone the disk regularly though.

 

[mercurial]

You can also look at Deep Freeze. Any changes that people make to the PC is gone once rebooted. You have to buy it, though.