'Software Restriction Policy' for 'Limited User' Accounts? RRS feed

  • Question

  • In Windows XP Professional SP3, I'm trying to set up a Software Restriction Policy for 'Limited User' accounts such as the apparently very clever one recommended at http://www.mechbgon.com/srp/index.html.  Looking into Microsoft's guidance on SRP (http://technet.microsoft.com/en-us/windows/aa940985.aspx?ppud=4), I thinkI see how to set up one side of this equation -- specify the EXECUTION directory or directories for non-administrators. What I don't immediately see is the other side of the equation:

    How do you prevent the LUA from SAVING files in the specified execution directory?  The reference above wants to restrict saving by non-administrators to a specific, DIFFERENT directory or directories, but it doesn't seem to say how...

    Can somebody give me a clue? -- JCW2

    • Edited by JCW2 Thursday, January 26, 2012 11:08 PM clarification
    Thursday, January 26, 2012 6:02 PM

All replies

  • OK, it finally dawned on me what is probably intended for the "other side of the equation:"  I'm supposed to use good old NFTP access permissions to enforce the no-save-from-LUA side.  These permissions can, of course, be tailored in any way desired (by the 'administrator').  Sound right?
    Friday, January 27, 2012 1:55 PM