Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite
1

I want to create a protected user account on Windows XP so the user cannot browse the C:\Program Files\ folder.

I want to install an application in C:\Program Files\, which they can run by clicking on a desktop shortcut, but I DO NOT want them to be able to:

  1. Copy that program do a disk
  2. Email it to themselves.
  3. View the app.config
  4. Install programs or do any other potentially harmful actions
share|improve this question

1 Answer

up vote 0 down vote

Right click on "Program files", browse to the Security tab and the rest should be simple. You probably only need to allow Read&Execute rights for the guest user. I don't really know how it will behave when the app will need to write something to the disk. You should test this aproach and see if it works or needs tweaking.

UPDATE

I just made a test in a VM:

  1. Created folder on desktop and put cmd.exe inside
  2. Created shortcut to this instance of cmd.exe
  3. Modified the rights as I described before

Conclusions:

  • the shortcut still works
  • no longer have browsing access to the folder
share|improve this answer
That gives them Read access though, which means they can copy the files, no? – JohnB Feb 12 '11 at 19:10
see my update. why don't you just do a test :D – user42933 Feb 12 '11 at 19:14
hmm, double checked that and it seems i was wrong, sorry :) – user42933 Feb 12 '11 at 19:21

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.