Microsoft Shared Computer Toolkit
Posted on September 14, 2005
Filed Under Security, Software, Windows |
In the past it has been a bit of a chore to set up a single computer to be shared by multiple users. Versions of Windows since Windows for Workgroups 3.11 have had some form of sharing capability but it is essentially for networked computers and is clumsy to use.
Windows NT introduced a whole new security architecture that allowed a user to restrict access to files and folders and dictate what another user can do with a computer. Privileges such as changing settings, running programs, or even shutting down the computer can be controlled with a great deal of precision.
With Windows 2000 and now Windows XP, this functionality has been greatly improved and new tools have been introduced to make managing a shared computer much easier. Unfortunately for most users it still isn’t easy enough.
Why would you consider restricting rights in the first place?
Many families have young children who they’d like to use the computer but they are afraid of the child might ‘mess it up’. Others might have sensitive information that that can’t be compromised. Some computers are set with particular settings to support special hardware or software. Someone might simply want to set up a kiosk in a library or mall and not have to worry about someone ruining the computer.
The Microsoft Shared Computer Toolkit was developed primarily to make it easier to secure public computers, like kiosks, schools, Internet cafes, etc, but it works equally well for any shared computer.
The Shared Computer Toolkit includes three tools – ‘User Profiles’, ‘Windows Disk Protection’, and ‘Windows Restrictions’.
‘User Profiles’ allows an administrator to specify where a user’s profile (all the settings including ‘My Documents’ associated with a user) will be located. It also makes it easy to create and delete users.
‘Windows Disk Protection’ can be used to automatically discard any changes a user might make to the C: drive when the computer restarts. If a user deletes files or adds unwanted files, they will be restored or deleted as the case may be when the computer is restarted.
‘Windows Restrictions’ is used to prevent changes to the computer. The Control Panel can be disabled, or the Start button can be simplified for example. You can also specify programs that are permitted to run.
The Shared Computer Toolkit is currently a Beta release and can be downloaded free of charge from Microsoft at http://www.microsoft.com/windowsxp/sharedaccess. The final release may well have a price tag attached so anyone interested in this software should give it a try while it’s free.
Comments
Leave a Reply
You must be logged in to post a comment.