How to setup a limited account for employess everyday task at hotel
Ok I am reformatting a making the computers used on the fornt desk on my hotel spaking new.
I am planning on setting up an administrator account for maintenance and installing programs, i will be the only one with access to this account.
I need to setup limited accounts for the employees on that work in the front desk so they can do their everyday duties. We are talking about people that dont even know the existence of spyware and how it can slow down the computer. For this reason i want to set limited accounts in windows xp pro for both computers.
The limited accounts should be able to:
-Access and perform changes on office suite programs like openoffice or MS Office.
-Be able to check new emails and answer them.
-Be able to receive fax and sort them.
-Be protected and be able to update spyware and antivirus programs.
-Be able to browse broadband internet and use programs like aol.
How should i set up the limited accounts?
I am planning on setting up an administrator account for maintenance and installing programs, i will be the only one with access to this account.
I need to setup limited accounts for the employees on that work in the front desk so they can do their everyday duties. We are talking about people that dont even know the existence of spyware and how it can slow down the computer. For this reason i want to set limited accounts in windows xp pro for both computers.
The limited accounts should be able to:
-Access and perform changes on office suite programs like openoffice or MS Office.
-Be able to check new emails and answer them.
-Be able to receive fax and sort them.
-Be protected and be able to update spyware and antivirus programs.
-Be able to browse broadband internet and use programs like aol.
How should i set up the limited accounts?
Oops...run gpedit.msc instead of secpol.msc. you get the admin templates that way.
A standard limited user account will allow all these task to be performed. You should also install AV and antispware software.
A simple set up like this should be sufficient for your needs.
As generalmandible has mentioned above, some additional restrictions can be added with gpedit.msc (but remember these restrictions also affect the admin accounts by default).
Hope this helps.
A simple set up like this should be sufficient for your needs.
As generalmandible has mentioned above, some additional restrictions can be added with gpedit.msc (but remember these restrictions also affect the admin accounts by default).
Hope this helps.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for all the help, i wish i could give the points to everyone.
Create a User account with a secure password for each employee (right click on My Computer & click Manage)
>Under event viewer, right click on each event log & click properties, set the log sizes to at least 4 MB
Run SecPol.msc and tighten down each setting as possible (cisecurity.org for more info on this) BE CAREFUL WITH THIS TOOL -- it is possible to break things with this
>You'll want to turn on all of your logging (Success & Failure), this can assist in troubleshooting & also provide security info (you have to look at them periodically though)
>The admin templates section can give you a lot of control over the windows environment
You might want to look at programs like DeepFreeze. Whenever you reboot, it goes back to it's previous state.