up vote 0 down vote favorite
1
share [g+] share [fb]

On Windows XP, how do you configure the/a Guest account so the user can't browse the C:\Program Files folder at all?

However, they can still run programs contained in that folder (if shortcuts are provided on their desktop)?

link|improve this question
50% accept rate
feedback

1 Answer

up vote 0 down vote

First open explorer, go to Folder Options > View and uncheck the Use simple file sharing, this will show the security tab.

Just log in with your admin account, right click on the folder, go to security, add the guest account and uncheck the permissions, (or you could deny everything and that means that he can't run the programs). In your case just leave read and execute

link|improve this answer
Read and execute means they can read and therefore copy. I am trying to avoid having them be able to copy it to another disk. – JohnB Feb 13 '11 at 5:56
then deny it, or you can try Folder Guard (winability.com/folderguard) – Remus Rigo Feb 13 '11 at 7:02
@JohnB: Add a new ACL rule that denies read access to Program Files itself but not to its contents. – grawity Feb 13 '11 at 13:20
@JohnB: How do you expect an account to run a program if it can't read the binary code from disk? – afrazier May 23 '11 at 17:48
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.