RelaX

Once again I turn to the tfp community in need of assistance.

[STORY]
We have a family computer at our house (yes I still live with my parents, something I hope to rectify soon) with Windows XP Professional. I tried my hardest to get them to use Linux, but they hardly know how a mouse works so I kinda let it slide.
Anyway, I installed XP pro and set up accounts for everybody, my mom, dad and lil sis. I set myself as mod and the others as plain users, didn't want them snooping around.
[/STORY]

[PROBLEM]
Now I have a problem, my dad uses a piece of software that requires administrative rights (lord knows why) and my sis needs administrative rights to access a chat site (ugh) that runs a Java applet (www.tmf.nl, the chat area).
[/PROBLEM]

[QUESTION]
So does anyone know how to grant a user administrative rights on one program and one website only? Surely there must be a way... I've been looking but I can't find anything.
I really don't like the idea of my dad and my sis (my sis doesn't even have a passw and likes to swap nice lil progs with her friends ) having admin rights.

__________________
The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're computer professionals. We cause accidents.
- Nathaniel Borenstein

Cynthetiq

nope.... only solution... power user rights.

for the java chat applet... make her use IRC and set it up so that it goes right into the chat room she's using.

for the father.. power user rights.

__________________
I don't care if you are black, white, purple, green, Chinese, Japanese, Korean, hippie, cop, bum, admin, user, English, Irish, French, Catholic, Protestant, Jewish, Buddhist, Muslim, indian, cowboy, tall, short, fat, skinny, emo, punk, mod, rocker, straight, gay, lesbian, jock, nerd, geek, Democrat, Republican, Libertarian, Independent, driver, pedestrian, or bicyclist, either you're an asshole or you're not.

rubicon

You need to determine why those applications need Admin rights. If it's just to the file system you can grant the user those rights within NTFS. If they need access to the registry, you can do the same.

As cynthetiq suggested, you can give them Power User rights which provides more access to the registry and file system without compromising security for everyone else.

What sort of Java chat application requires Admin access???

I have a question: if this is a family computer and doesn't have your own data, does it matter if they "snoop" around?

__________________
How you do anything is how you do everything.

arcane

group policies man

__________________
<Arcane> so if you banged 2000 chicks then at least one had a pen0r?

oberon

IMHO people should always use "limited" accounts unless they specifically need admin privileges for a particular purpose. This closes a lot of security issues.

__________________
"There are finer fish in the sea than have ever been caught." -- Irish proverb

RelaX

Thanks everybody for the power user idea... that was it... can't believe I overlooked that.
They still have a lil bit too much rights for my tastes though. But I guess I can just go tinker with the poweruser policy. Personally I first learned all about group policies and user accounts for an OS with Linux, so I feel reluctant to hand out administrative (root) accounts to just about anyone.

__________________
The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're computer professionals. We cause accidents.
- Nathaniel Borenstein