Re: user desktops by VanguardLH
VanguardLH
Tue Apr 22 02:53:48 PDT 2008
Ken wrote:
> VanguardLH wrote:
>> steve wrote:
>>
>>> Hello, our computer is set up on a network, Our IT dept. told us to log on,
>>> log off, and then log on again and that woould allow each person that logs on
>>> to have control of there own desktop. There are some files that we need to
>>> all have access to so I put a shortcut to that file in the C:\doc-settings
>>> all users desktop folder, and it worked fine everyone had access to it. but
>>> then someone decided they did not want it on there desktop so they deleted
>>> the shortcut and when they did it took it from all the other users desktops
>>> also. I thought each persons desktop was there own. or do I have something
>>> seeeeet wrong.
>>
>> No, you put it under the All Users profile. That means the shortcut was
>> *shared* by all user accounts but they were all sharing the shortcut
>> under the All Users account. Obviously this user had admin privileges
>> instead of a restricted user account which means you let that user do
>> whatever they want in any account they want. If you don't want users to
>> be admins to do whatever they want, give them restricted accounts. I
>> would suggest, however, that you make at least one backup account with
>> admin privileges rather than relying on just the Administrator account;
>> however, only someone with admin privileges should know the login
>> credentials for that backup admin-level account.
>>
>> Each person's desktop *is* their own. That is NOT from where the
>> shortcut got deleted. It got deleted under the All Users account (in
>> its profile path). Remember that an admin can do anything, include
>> shoot themself in their foot.
>
> Is there a way to remove programs from "all user" access and
> add to a specific user's access without having to remove and
> reinstall the programs?
If you are only asking about the shortcuts, I'd just open the folder
under the All Users profile path, cut the shortcuts, and paste them in a
folder under my profile. That only handles the shortcuts. The program
may be configured with permissions to run for all users (Everyone
account) rather than just for a specific account, so moving the
shortcuts does nothing regarding who could use Windows Explorer or Start
-> Run to run the program.