Severely restricting a user account

Posted on 2011-10-04
Last Modified: 2012-05-12

I have decided to let my son use the computer. Windows 7 Ultimate x64.

I have created him a separate account, but essentially the ONLY thing he should be able to do is access the internet and log off/on.

I also want to restrict him to only 1 website for now.

I don't want him to have access to any programs at all in the Start Menu.

I tried secpol.msc but it just says

"MMC could not create the snap-in"
MMC could not create snap-in. The snap-in might not have been installed correctly.

Name: Local Group Policy Editor
CLSID: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Question by:hongedit
    LVL 10

    Accepted Solution

    You can't do all this with just security policies (you can do most). For the web access part, if your home router has that feature (mine does) I can block/allow web access to any website i want to specific hosts; alternatively you can install a proxy server somewhere in your home (or in the workstation itself) and restrict web access with third party tools.

    There's a number of ways all those things can be done but require a lot of work and could be hard to maintain.

    Easiest thing hands down is to change his account's shell from explorer.exe to iexplore.exe (internet explorer) so that'll be the only program he can run (you need to disable ctrl+alt+del, ctrl+shift+esc as well so he cant start processes from there). That would take care of the local machine access (there's a few ways it can be bypassed but don't think your son could figure it out; including typing C:\ on the web address bar, etc).

    For the web acess, you'd still need a proxy of some sort, (or the router )
    LVL 5

    Expert Comment

    you need to run this as administrator or disable UAC while your making the changes.
    LVL 28

    Assisted Solution

    Ddiazp has definitely made some good suggestions.

    If you really want a great deal of fidelity over your son's capabilities and don't mind spending a bit of money, the consensus opinion is that Faronics WINSelect provides you with the best control functions:

    Faronics WINSelect Standard

    Faronics WINSelect Standard Manual
    LVL 77

    Assisted Solution

    by:David Johnson, CD, MVP
    you can also enable parental controls I made a video for you here and on youtube to monitor usage i.e. web you need to configure windows live safety
    LVL 1

    Author Closing Comment

    Thanks guys

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    Updating Java 9 62
    Unable to connect to printer 6 31
    Windows Update not working. 8 35
    Paste selection to Notepad 2 11
    One of the features I've come to appreciate about Windows 7 and Windows Server 2008 R2 is the ability to pin applications to the task bar. As useful a feature as I've found this, it does have some quirks.  For example, have you ever tried pinning an…
    First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
    This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
    The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now