Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On Windows XP, how do you configure the/a Guest account so the user can't browse the C:\Program Files folder at all?

However, they can still run programs contained in that folder (if shortcuts are provided on their desktop)?

share|improve this question

First open explorer, go to Folder Options > View and uncheck the Use simple file sharing, this will show the security tab.

Just log in with your admin account, right click on the folder, go to security, add the guest account and uncheck the permissions, (or you could deny everything and that means that he can't run the programs). In your case just leave read and execute

share|improve this answer
Read and execute means they can read and therefore copy. I am trying to avoid having them be able to copy it to another disk. – JohnB Feb 13 '11 at 5:56
then deny it, or you can try Folder Guard ( – Remus Rigo Feb 13 '11 at 7:02
@JohnB: Add a new ACL rule that denies read access to Program Files itself but not to its contents. – grawity Feb 13 '11 at 13:20
@JohnB: How do you expect an account to run a program if it can't read the binary code from disk? – afrazier May 23 '11 at 17:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .