Need to create secure user

[TimRegester]

I have a client with a number of PCs all running Windows XP Pro. These PCs will mainly be for public use but need to be used by staff occassionally and for admin. I would like each PC to be unable to see any shares on the network.

I created a user account which is 'limited' on each PC, but I need this user to be discreet from all the admin PCs on the network as it is for public use. I also need it to be secure so that noone can change any settings on the PC.

But once I have created the user it can see all the shares on the network workgroup, so I need to put it in a different workgroup from the admin PCs while still allowing a user to log in as administrator into the company workgroup. The limited user can also still run regedit so this needs to be fixed.

I attempted to create a new group in system administrator for the new 'limited' user but when I reboot that user is not available as a login.

So how is this done. How can I create a user that can use the internet, run applications but still have two logins available at startup, each user logging into a different workgroup.

Any help would be appreciated.

Btw creating a domain on the network will be difficult as there is no server and no PC that is always in use.

 

[bcastner]

Creating a domain in your setting would be impossible.

See my suggestion here: thread779-685048