restricting access for users in WinXP?

[Hso]

Hey, everyone brI have a few questions for you :S~brbrIs it possible for me to restrict access to certain applications, restrict downloads of certain file extensions(.exe's), and possibly restrict installation of software on other users?brbrThere are 3 usernames on my computer.brMine, my bro's, and my sister's.brMy account is the main one, but all 3 are set as "Admin" 'cos alot of software cannot run on Limited...brbrMy bro was accussing me of putting his account on Limited and started fishing about the M$ website for something about registry... he downloaded something but i wasn't sure what.brHe was trying to figure out a way to access a .pdf document that was on the desktop in my username, but he wasn't able to access it through his username...brLater, i found out that he installed "System Policy Editor", and some DRM files... I honestly have no idea what these are, but they sound like a threat.brMy bro is always installing sh*t on my comp and he always messes stuff up, and then *i* get blamed for have a "crappy" pc when performance drops!brbrIf possible, I would like MSN Messenger to be, well, "banned" from my sister's username, due to safety reasons.brbrIf there's any free software that can accomplish any of this, i'd really like to hear about it!brCan anything be done about this?brbrThanks very much!br

[mondine]

I think that the area you should really be looking into, is how to give limited accounts the necessary abilities to run the software they need.

Most people I know don't use an account with admin permissions for even their own daily purposes. Having it wide open for three users is just asking for trouble. Particularly if your brother is doing sneaky things behind your back.

[dauodwa]

Yeah, you can. Just go into control panel, user accounts, and click on your brothers one. Then you go to account type and change it so that he has no admin priviliges. I should know,. ive done that before!

[Hso]

Unfortunately, that's not helpful I don't want to use "Limited" as it restricted already-installed-software from being able to run

[Albatross]

Click Start > Right-Click "My Computer" > Click "Manage" > Expand "Local Users and Groups" tree > Click "Users" folder > Double Click the desired Username > Click "Member of" tab > Click "Add" > Click "Advanced" > Click "Find Now" > Select "Users"

Save and Exit.

Disclaimer: If you enter the System Managment window, you are doing it at your own risk. Don't go playing aroung in there.

[Hso]

Hey, just checked that out.
My account is Admin, my bro's is Admin and User, and my sister's is User.. so, i should remove Admin, right?
Yesterday i figured out that my sister could not use nero without "nero burn rights"... which i installed later on, not sure how that works, exactly..