Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i have windows server 2003 and the workstation windows xp I want to create a user that should NOT be able to do the following options 1. the user should not view or change TCP/IP Properties 2. the user should not be allowed to install any new program to the machine. 3. the user should not be allowed to share his file 4. the user should not be allowed to uninstall any programs from the machine.

Thanks, hossam

share|improve this question
Do you have a domain? – Massimo Aug 17 '10 at 9:18

Those you described are standard permissions for non-admin users.

So, if you simply create an user account and not make it member of Domain Admins (if you have a domain) or local Administrators (on a single machine) groups, he will not be able to do anything you do not want him to.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.