Network sharing vs user function, Win2K

EvilHorace · Post by **EvilHorace** » Sun Nov 30, 2003 11:29 am

I don't want my kids PC to be able to access any other PCs yet still be able to use my network printer so it's assigned as "User" only (not admin, power user) BUT he complains that he's now unable to do many things as he gets messages that he doesn't have admin access. It can't even do windows upgrades unless I login as admin.

Is there a better option, alternative that will make that PC more useable yet off my other PCs.

Post by **FlyingPenguin** » Sun Nov 30, 2003 1:30 pm

Just restrict the shared resources on the other computers. I assume they're all Win2K or XP Pro?

You need to disable simple networking and disable the Guest account on all system sharing resources. Then make a user account just for him on the computer with the shared printer. Allow everyone to have access to the printer, but restrict the shared folders to only the users you want to allow access.

Any system he doesn't need access to at all, don't bother making an account for him on it and he'll be shut out.

You need to setup the user accounts in the Users settings in Computer Management NOT the simpler User Accounts in Control Panel (which is why these machines need to be running Pro).

EvilHorace · Post by **EvilHorace** » Sun Nov 30, 2003 3:18 pm

They're all Win2K pro and I havent yet tryed exactly as you're saying here (yes, adjustments in computer management) but I'll look into it more later today and see if I can get it right.
Can his PC be anything better than "user" so that it's able to DL, install programs such as Windows upgrades, etc? He's got a burner too but says that it won't even allow him to burn cds as is.
Seems to me that in the past when it had administrator privalages (thus fully functional in every way), it could access any other PCs files through network neighborhood even though his PC wasn't listed as being shared and even with Zonealarm not listing his PC either.

EvilHorace · Post by **EvilHorace** » Sun Nov 30, 2003 11:32 pm

Think I got it. I added his PC to the powerusers group so hopefully it'll be more functional (?). I then removed his PC from the user list on my main PC and removed it from the allowed ZA IP address share list (IF that matters).
Now from his PC, it'll see my main PC in network neighborhood but needs a PW to get it so it's halted there.

Thanks for the advice.

Post by **FlyingPenguin** » Mon Dec 01, 2003 1:51 pm

You can make him an Administrator on his own computer which will let him do anything. Just restrict what he can access on the other systems.

EvilHorace · Post by **EvilHorace** » Mon Dec 01, 2003 7:39 pm

It was originally setup that way except that I apparently had his PC listed on my PCs, probably to send files when I setup the OS the last time I needed to re-do it.