The easiest way is to hide the program shortcuts from those you don't want to give access to. (There is a folder containing program shortcuts for each user, c:\Documents and Settings\ \Start Menu, and there is a folder containing shortcuts for all users, c:\Documents and Settings\All Users\Start Menu). If you want to give access to program X to users A and B only, but not C, remove the shortcut to program X from the All Users' Start Menu and place it in user A's and user's B Start Menu.
The above method can be easily circumvented by C if C knows where program X's executable is stored and invoked it from the command line (or create a shortcut to program X's executable and run the shortcut).
If you absolutely don't want C to access program X then you must set the permission on program X to prevent execution by C. You can do this manually using the cacls command or use a commercial tool, referenced in the previous post, if you're not technically-inclined.
JarmoD
171 Posts
407
0
Posted April 6th, 2005 11:00