Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 0 down vote favorite
1

On Windows XP, how do you configure the/a Guest account so the user can't browse the C:\Program Files folder at all?

However, they can still run programs contained in that folder (if shortcuts are provided on their desktop)?

share|improve this question

1 Answer

up vote 0 down vote

First open explorer, go to Folder Options > View and uncheck the Use simple file sharing, this will show the security tab.

Just log in with your admin account, right click on the folder, go to security, add the guest account and uncheck the permissions, (or you could deny everything and that means that he can't run the programs). In your case just leave read and execute

share|improve this answer
Read and execute means they can read and therefore copy. I am trying to avoid having them be able to copy it to another disk. – JohnB Feb 13 '11 at 5:56
then deny it, or you can try Folder Guard (winability.com/folderguard) – Remus Rigo Feb 13 '11 at 7:02
@JohnB: Add a new ACL rule that denies read access to Program Files itself but not to its contents. – grawity Feb 13 '11 at 13:20
@JohnB: How do you expect an account to run a program if it can't read the binary code from disk? – afrazier May 23 '11 at 17:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.