How to use: samples, typical use cases
Creating comfortable non-admin working accounts on home OS
It is a well known fact that most problems of Windows users are coming form working with administrative privileges instead of regular user account. It is easy to understand those people who works in administrative account; Windows versions before Vista grants very poor permissions to regular user accounts, so it is uncomfortable to work.
We offer a way to grant some more permissions to regular user account:
- Install both User Manager(UM) and Permissions Manager(PM).
- Run UM, create a group named "Power Users" (it is not required to use this name, just example).
- Grant "Change system time", "Take ownership of objects" privileges to this group.
- Grant "Power Users" right to modify "Program Files" directory.
- Create user account; add it to the "Users" and "Power Users" groups.
Of course it will be not equal to full administrative account allowing installing the software, drivers, configuring hardware etc. But if this will be enough to make your work comfortable enough, it can protect your instance of Windows from many malwares and thus save your work and time for recovery.
Accessing blocked files on external hard disk
This is useful when you are upgrading your desktop, or when you are trying to recover you data after hardware problem and/or virus attack. When your have attached your hard disk with data taken form crashed PC you will be unable to access "private" folders like "Desktop" or "My Documents" in your old profile. In this case you can use Permissions Manager to take ownership of inaccessible files or folders.
Be aware of doing this trick on profiles of other users on live system. This can block real profile owner from accessing own profile (and even log on can become impossible).
Protecting private data on secondary hard disk (or partition)
PC vendors often equip computers with two physical hard drives, or create two or more partitions on one hard disk. Typical security settings on second drive for this case: everyone has full control on any object. You can protect some (or all) data by changing security settings with Permissions Manager software.
Disabled Administrator account on Vista
Default configuration of Vista has "Administrator" account disabled. You can enable it with the User Manager. Just install it, then run it, double click "Administrator" in the user list and remove selection from the "Account disabled" check box. Click OK. That is all, Administrator is enabled.
Setting up logon script
Normally XP Home and Vista Home have no generic tools to specify a logon script for account. But you can do it with the User Manager software.
Do the following:
- Create a folder for logon script somewhere on your hard drive. For example folder "scripts" on "C:\".
- Share this folder for the network. It must be done even if you have no network. Share name must be "netlogon". And it must be readable by the user you are setting logon script for.
- Create a ".cmd" or ".bat" file in the "C:\scripts" folder. Let's think you have created "logon.cmd" file with required commands.
- Run User Manager, double click the user you want to set logon script to, press "Profile" button on the user properties dialog. Type "logon.cmd" to the logon script edit box. Not "C:\scripts\logon.cmd", not "\\computername\netlogon\logon.cmd", but "logon.cmd". Windows will add all other parts of the path automatically.
Note that "netlogon" share name is a must. All other names are just samples, you can user your own names.
Changing profile path
If have not enough free space on your hard disk "C:" you can move your profile to another hard disk.
This operation requires several experience in IT sector, please make sure that you know what you are doing.
Steps can be following:
- Make a good backup of all your data.
- Create an account with administrative rights.
- Log on into new account.
- Create a folder at new location where you want to move the profile (for example on drive "D:").
- Run User Manager; open "Profile" page for your work account (account which profile is to be moved); put the path to new profile folder to the "Profile" edit box.
- Log on to the work account (you will see virgin workspace). This step is needed to let Windows create default profile layout for the account.
- Log on as new administrator again (account created on step 2).
- Copy all the working data from old profile to the new one (this step requires knowledge about profile layout).
- Log on to the work account again. Now you should see your workspace if everything is done correctly. You can delete old profile if you need more free space on its location.
You can create a temporary account for your guests. Use the User Manager to create an account; specify expiry date and time on the "Profile" page of the user properties dialog. Note that user will be unable to log on after expiry date, but current sessions (if any) will not be terminated automatically.
Be aware of setting expiry date for your own account, you will be unable to work with the system after expiry.