Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

i have windows server 2003 and the workstation windows xp I want to create a user that should NOT be able to do the following options 1. the user should not view or change TCP/IP Properties 2. the user should not be allowed to install any new program to the machine. 3. the user should not be allowed to share his file 4. the user should not be allowed to uninstall any programs from the machine.

Thanks, hossam

share|improve this question
1  
Do you have a domain? –  Massimo Aug 17 '10 at 9:18
add comment

1 Answer

Those you described are standard permissions for non-admin users.

So, if you simply create an user account and not make it member of Domain Admins (if you have a domain) or local Administrators (on a single machine) groups, he will not be able to do anything you do not want him to.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.