Does anyone has any idea how can i secure my box? ? ? ?

does anyone knows how to block other users that don have the administrators access in a Win XP Pro to view other users folders and open files of other users ? ?
Because today in 1 of my computers i have several users and each and every one has a password, the problem is that a open a CMD and y saw
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\user1>

and after that i typed

C:\Documents and Settings\user1>cd..

and then
C:\Documents and Settings\

after that i typed dir and all the user names were displayed and i typed cd and the user name and dir again and it showed me some directoris and i could open files that were in other users settings even the administrator account and i opened some zip files and some text files


How can i prevent that from hapening ? ? ? ? ? ?

were you logged in as admin when you opened cmd?
search google for securing xp and it will give you a much more detailed list of things to do...i dont have the energy to go through all of it. good luck.

no i was logged in as User1 one of the other users i made.

Is the disk formated in NTFS?
If so, was it formated in NTFS when the accounts were created?

Ammo

yes is formated in NTFS.

You saw the names (that appears to be normal), but you did not say that you could access their folders and see what is in them. That is where the security should be. Windows does not hide the folder names but should not let you access their folders, or others you have not given that user access to.

You have to go in and make the users' directories private. The only problem is, I don't remember how. :( There's a button somewhere which will automatically do it for you, but it's been a while since I re-did my XP machine, so I'm not sure where it is. Worst case scenario, you can log in as Administrator, and go to the Documents and Settings folder and restrict access of each folder to that specific user and the administrator's group. That'll give you what you need, though it'll take a little while to do if you have a lot of users.

AJ

If I recall correctly, it is in the administrative tools ---> security settings. Hope this helps

If its an NTFS directory, you can right click on the folder from mycomputer and then access the security tag.

Its quite likley that the whole disk has the 'everyone' security set, and each subfolder is getting permissions from its parent.

you should look at the root drive (d: or c:) and remove the everyone field (perhaps setting it to a minimum of authenticated users) remove.

On the user directory, remove inheritable permissions and set for only the user (and perhaps admin) to have rights

in response to flipflop. in cmd i saw the directories and i was able to see the content and open the files, (ex. txt, zip)

You need to set lower priviledges to user1, and while you're at it, disable guest.

I actually have the reverse problem.

When I got my laptop, it was NTFS and I created myself and my roommate as accounts so we could each have our own settings. He moved out last week, and even though my account is admin, I can't delete any of his folders (he has about 2 gigs of mp3's and pr0n) to free up space. I'd hate to put my restore disk in after all the formatting I've done to it.

Any clue?

jezter, as the admin you should be able to delete his account.

jezter6> do you remember the very first password you put in when you set up the laptop? Not the one for your account, but before that. There is a user Administrator and that was the password for it... Use that login and it should fix your problem.

As far as private folders....
My Computer>C>Documents and Settings>
Right click on your user name
Click on Sharing.
There is a check box to make your files private.

You may not want to totally remove the "everyone" group from the security permissions. What you _could_
do is set the permissions per folder for each user, ie., user1 can see the Docments and Settings folder and its'
subfolders, but not access any folder that isn't explicitly the User1 folder. There may very well be a button
that automagically sets up the security settings, but the best way (oddly enough, it's a little more work) is to get
your hands dirty and do all the security settings by hand.
BTW, the issue of whether to remove the "everyone" group or not is up to the individual Admin. Personally, I
would keep it there, but cripple it. That way, if something goes horribly wrong (not that it would...) it would be easier
to start from 'scratch', as it were. Again, it's personal opinion, so my $.02 can just go into the tip jar, /dev/null...

zaddikim
_-_-_-_-_
Still relaxed and blissfully brain-dead after camping