Regarding Local Computer Security Windows 2000

Hi Friends,

I am Network Admin for Large company and we have no servers installed in my organization .We have all windows 2000 pro computers and all computer is having 5 to 10 accounts on each computer.We are using Pagemakker and adobe application.
My problem is how i will protect my c drive which contains all application installed and i have d drive to hold profiles.I specified " \\computername\profiles\username " in profiles .The problem is each users deletes each others files on lcoal computer.My company do not want to put server so any one help me how i will protect local computer and each others data.

Here what have istalled in each pc.

I created 2 folders in D drive and all application installed in C drive.

Permission for C drive is :

Every one is = Read Only

Administrator= Full Control

System = Full control

Permission for D Drive is :

Every one is = Read Only

Administrator= Full Control

System = Full control

For Documents folder which has all users data

permission for Documents is :

Every one is = Full Control ( Share Permission  )

Administrator= Full Control ( NTFS NTFS Permission )

System = Full control ( NTFS Permission )

And All users folder created under this folder which  has  permission : ( These are NTFS Permission )

Everyone : No

USer   : Full Control

Administrator : Full Control

System : Full Control

This works fine for data but some times users deletes the profiles.

and most importent is users deletes some files from winnt folder also.So please any one help me in this case.

I want to access all application on computer and do not gives rights to other users.I was given all files to administrator but when user logs on computer and when they run Pagemakker then then they get error "access denied" i tried very hard but it is very difficult.

Help me...


Who is Participating?
I think you may need some third party utility for doing this.


Folder Guard helps you to keep sensitive files and folders safe and secure on your computer. It's highly configurable and very easy to administer, with excellent documentation readily available. An Explorer-style interface allows you to easily select folders to protect. You can choose to hide the contents of individual folders, tag folders and contents as read-only, or render them unavailable and totally invisible. The features work not only in Explorer, but also in any file dialog in other applications. The main program is protected by an administrative password, and you can assign individual passwords to gain access to protected folders. A separate program is included to let you quickly toggle the protection on and off.
Reviewed on May 17 2000.



Sentinel is an interesting security utility you can use to apply very specific restrictions to files on your PC. It runs from the system tray, enforcing restictions you've imposed on selected files and folders. The specific security options are available from a new tab the program adds to the Properties dialog box you can access by right-clicking any file or folder in Explorer. You can log and/or deny access to any unauthorized user that attempts to open, read, and/or write to files, and you can deny access to the contents of selected folders. An available control panel allows you to toggle this functionality on and off, and turn it off for a specific period of time. Other features include stealth mode and logging support. Sentinel is a snap to use, and provides the power and versatility you need to protect your sensitive data files.


Encryption Plus. Folders Freeware is a fast easy-to-use program that performs on-the-fly encryption. You just put your confidential files in a single folder and point-and-click. You don't have to think about security or remember anything except your password. Folders Freeware does all the work behind the scenes, encrypting and decrypting your files automatically and transparently as you use them. Super easy-to-use. Windows 95/98/ME and Windows NT/2000 compatible. Full-featured versions of Encryption Plus. for Folders are available for purchase in Standard and Enterprise editions.


Windows Security Toolkit

Restrict Access to Passwords Settings, Restrict Access to Network Settings, Restrict Access to Display Settings, Restrict Access to Device Manager, Restrict Access to Hardware Profiles , Restrict Access to Virtual Memory Setting, Restrict Access to File System Setting, Restrict Access to Printer Setting, Restrict User from adding Printer, Restrict User from deleting Printer, Hide Printers General and Details Pages, Hide System Settings Control Panel, Restrict Access to Modem Settings, Restrict Access to Regional Settings, Restrict Access to Internet Settings, Restrict Access to Multimedia Settings, Restrict Access to Add/Remove Programs, Restrict Access to Power Management, Hide All items on the desktop, Remove Favorites Folder from the Start Menu, Remove Documents Folder from the Start Menu, Hide the task bar settings from the Start Menu, Remove Find Command from the Start Menu, Restrict changes to enabled Active Desktop, Disable use of Active Desktop Feature, Clear the recent Documents when Windows Exits, Disable Modification of Start Menu, Remove the Run Command from the Start Menu, Remove the Folders from the Start Menu, Remove the Help Option from the Start Menu, Disable File Sharing over the network, Disable Printer Sharing over the network, Hide Shared Passwords With Asterisk, Disable Save Password Option in DUN-NT, Don't display Username on logging in NT, Disable Caching of NT Domain Password, Hide Workgroup Content from Network Neighborhood, Remove Entire Network from Network Neighborhood,Fix DHCP Security Bug in Windows 9x/NT/2000 to stop hackers from accessing your system, Hacker Guard - Disables Hackers from using a modem to access the Internal Network, Disable MS-DOS mode in windows,   Disable use of real mode Dos Applications, Reset the Content Advisor and Ratings Password, Disable Internet Explorer Content and Ratings Advisor, Restrict User from changing Internet Explorer Advanced Settings, Restrict User from Accessing your personal profiles in Internet Explorer, Restrict User from Accessing Information from your Internet Explorer Wallet, Disable ability to run registry editing tools, Disable Windows Password caching ability, Restrict access to event logs in Windows NT and 2000, Disable use of Windows Hot Keys.


iProtect Offers Serious PC Protection

Upgraded software locks, encrypts, hides, and even shreds your files. But don't not forget your password.

To paraphrase an old saying, just because you're paranoid doesn't mean someone's not after you. Or your files.

Whether you are paranoid or just being cautious, a company called International Software Solutions wants to help. It offers a product called iProtect, a Windows-based software utility that can, with a couple of clicks, lock, encrypt, hide or shred files right on your desktop computer. iProtect keeps them confidential and prevents accidental deletion. "It's a good little tool for the end user," says Diana Kelley, senior security analyst at the Hurwitz Group.


Magic Folders  

Your invisible folders and files can't be deleted, viewed, modified, or run. For all practical purposes they don't exist. Use Magic Folders to protect your finances, taxes, business and personal documents. Others won't know these files exist and they won't be able to accidentally delete or modify them either. With Magic Folders you can turn your computer over to your children or co-workers without worrying if they'll delete, modify or view important files.


Steganos 3 Security Suite

02-23-2001 - The Steganos 3 Security Suite is a complete, easy to use security package. Steganos encrypts and conceals your data. The Steganos Safe is your secure hard drive, which disappears at the click of a button. Includes: Internet Trace Destructor, file shredder, e-mail encryption, password manager, and computer locking


Winlock is now freeware
Major features of WinLock:
Lock Windows at system boot
Lock Windows at suspend
Lock, Suspend or Shutdown easily with once click
Powerful schedule Shutdown/Restart/Suspend system
Autosave applications on Shutdown time
Autorun saved applications when system start
Autorun any applications when system start
Advanced power management
Windows List with Show/Minimize/Maximize/Hide functions
Process list with Icon/ID/Type/Priority/Kill functions
Powerful administration tools


Panda Secure

ARMORED PROTECTION for desktop and laptop computers. If you share your computer with other users, if your children waste time playing computer games, if you store confidential data on your laptop... then you need Panda Security.

Panda Security is Panda Software's NEW Security program. With this software you will turn your computer into an armor-plated vault, preventing unauthorized operations and even data loss and theft (with hard disk encryption).

All the conceivable security threats that desktop and laptop computers may be subject to can be controlled through Panda Security. Benefit from a reliable, intruder-proof system thanks to its access control, login/logout, user ID and audit report features, which guarantee you total privacy at all times.

Panda Security allows you to:

 Restrict the use of your computers to specific users and time frames.
 Prevent the installation of inappropriate software (games, illegal applications, etc.).
 Block access to established configuration settings (Autoexec, Config, etc.).
 Protect specific files to prevent unauthorized operations (deletion, renaming, saving to a floppy disk, printing, etc.).
 Encrypt your e-mail messages and hard disk data.
 Control Internet and e-mail use.
 Keep track of exactly what is done on your computers.


Icon Lock-iT 2000

Icon Lock-iT 2000 gives you the flexibility to lock an individual file or the entire contents of a folder. The process is very similar with both functions. When locking the contents of a folder, you simply right click on the folder name rather than an individual file name and select "Lock Files".

As this screen shot indicates, multiple files are listed rather than one. As an added convenience, you can review the files to be locked at this time and selectively uncheck any files that you do not wish to lock.



Right-click on empty space in the folder which you want to protect and select CUSTOMIZE THIS FOLDER,
then choose CREATE HTML DOCUMENT FOR THIS FOLDER. Once the document is opened in Notepad, scroll down
until you see <script language>="JavaScript"> Insert a blank line after this string. Then insert the
following text.

Put a password in the place of YOURPASSWORD but leave the quotes. Save the document, exit Notepad,
refresh the folder (or hit F5), enter your new password, and the next time you try to enter that folder,
you'll be prompted for your password. If you enter a wrong password you'll end up in C: drive!

This works on Windows 98 and 2000.



"SecureUp is the ultimate security system for your desktop, laptop and network computers. With this software you will turn your computer into a secured lock, preventing unauthorized operations and data loss. All the conceivable security threats that desktop, laptop and network computers may be subject to can be controlled through SecureUp. Benefit from a reliable, intruder-proof system and install it today. SecureUp=99 allows you to restrict the use of your computers, block access to established configuration settings such as Autoexec.bat, etc, lock all files to prevent unauthorized operations deletion, renaming, saving to a floppy disk, printing etc"



With Power Administrator, you can have absolute control over your computer's functions and restrictions. From blocking the access to certain folders or disabling programs of your choice, Power Administrator gives you the most out of your PC & network with incredible convenience. Whether you are a home user, business user, or network administrator, Power Administrator is designed around your needs, enabling you to perform a vast number of administrative changes with the click of a button.



Win 2000Server-only: This tool is included in the Windows 2000 Server Resource Kit only.

This tool is a GUI-based application that allows an administrator in a multi-user environment to restrict the access of ordinary users to a predefined set of applications on the network. Enabling application security using this tool will cause the system to reject any attempts by ordinary users to execute a program that they are not authorized to use.


Other considerations

The Crazy One
One software package supports the whole range of authentication methods, for your local machine or your domain. SecureSuite™ is an integrated software package that provides a suite of security applications for Microsoft Windows 98, Me, NT 4.0 and 2000. These applications include logon, file and folder encryption, a password bank utility, application execution control, and Entrust PKI support.

This suite of applications offers added security for users of Microsoft Windows 98, Me, NT 4.0 and 2000.

SecureLogon™ enhances the normal logon procedure for Windows, enabling users to log on securely and easily using one of the many authentication devices supported by SecureSuite.
SecureSession™ stores user name, password and other personal information for any Windows-based application or Web-based form, and releases it upon authenticating the user.
SecureFolder™ allows you to easily protect your files, folders and Web page bookmarks with strong encryption. The locking/unlocking of folders and encryption/decryption of files is activated by a SecureSuite-compatible authentication device.
SecureApp™ prevents unauthorized users from running Windows applications. Great for accounting software and databases that contain sensitive or confidential information.
SecureEntrust™ provides Entrust Technologies' Public-Key Infrastructure (PKI) support.
General Features
Five security programs in one suite: SecureLogon, SecureFolder, SecureSession, SecureApp and SecureEntrust
Compatible with Windows 98, ME, NT 4.0 and 2000 (see Detailed Features)
Increases the security and convenience of using a PC
Multiple authentication methods, including a combination of different methods
Support for workstation only and client/server systems
System and network can be administered from the server and/or client
"On-the-fly" folder and file encryption with "drag-and-drop" convenience
Interactive logon guides users with animation or video clips tailored to their profile
"Last User" support: the last user logged on to a computer need only place his/her finger on the scanner to log on again without hitting any keys
Locked screen saver can be activated at any time via the "Pause" key (where supported)
Maintains the "look and feel" of standard Microsoft Windows interface
Easy to use wizard-based installation, setup and enrollment
Customizable features including animation, logos, graphics, audio and visual feedback
Multi-language support
Biometric API (BAPI) standard compliant
Give each Directory permissions with the username and the Administrator(s).
So only the user or the Administrator have acces to this folder ?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.