8/27/04 How to keep my kid out of cyber-based trouble

****** HONORABLE MENTIONS**********

Answer:

If you have Windows XP, this procedure is quite simple.

Go into the Control Panel, and select User Accounts. If you only have one user, click Create a new account. Give it a name, and in the next screen, select ?Limited Account?, and Create Account. Then, click on your user, and click Create a password. Give yourself a password your kids would not ever guess. When all is done, your kids will not be able to install anything or do any major system modifications, unless you log in and do it.

If you have Windows 2000, this takes longer.

Right-Click My Computer, and hit Manage. In the new window that opens, hit Local Users and Groups. Right-click on Users and hit New Users. Fill out the form, but in the Permissions tab, select ?Users? as the account?s type. Now, when you are done, Ctrl+Alt+Del, and a window with many options opens. Click Change Password, and set a password for yourself. This works the same as a Windows XP Limited Account. REMEMBER your username AND password, or you are not getting back in!

If you have Windows 95/98/Me (9X), there is little that can be done.

The Windows 9X series were not meant to be multi-user Operating Systems. It has limited multi-user capabilities, and there is no way to lock out your kids without downloading third-party software. Even then, there are many loopholes in 9X, and they will most likely find them before you do.


Submitted by: Mike

**********************************************************************


Answer:

That's easy -- and should be done by ANYONE with children, even if they're well behaved, if for no other reason than the increased privacy. Assuming you are using Windows 2000 or XP, just set up users for each member of your house -- or just one for adults and one for kids -- or any set or subset that you like. I like one for each person, because then you have individualized file storage in an easy location -- "My Documents", which is separate for each account.

(This is for Windows 2000, which is what I run, but it's a similar setup for XP.)

Go to the Start -> Control Panel, open up Users and Passwords.

Make sure the box "Users must enter a user name and password to use this computer" is checked.

Also make sure you know the Administrator password ... but you should know that anyway. (If not, you'll be setting up an administrator, so it'll be ok, but it's safer to know it.)

Add a user by clicking on "Add". Enter in the User name for yourself, and the other stuff (Description) as you desire (it doesn't affect anything.) Type in a password and retype it to confirm. DON'T FORGET THIS.

Now select "Other" for "What level of access do you want to grant this user", and select "Administrators". You want to give yourself permission to install and run programs, uninstall, perform user maintenance, etc.

Then select "Finish". You are now created. Next time you start your computer up, a log on screen will appear as Windows begins to start. You will type the user name and password combination in to do anything on the computer.

Then comes the part where you limit access to your kids. For each kid (or for the kids as a group, if you prefer) create a new account. Follow the same steps as above -- but when you get to the question "What level of access do you want to grant this user", select "Restricted User" (User). This is the part that prevents them from installing any programs. (Power User, the other major option, would still allow them to install programs -- you can't limit specific programs, unfortunately, so it's all or none. Each they need to install something, you'll need to enter the Administrator Password to continue -- which is what you wanted, right? But, if you have older or more well-behaved children that you trust to install programs, make them Power Users.)

Now -- don't give your kids the administrative password (and if they had it before, CHANGE IT from the logon screen or from this screen under "Set Password"), but give them their own password only. Now they can't install programs, but can run them and can save documents to their own folders!

You can also create your own kind of group, from the Administrative Tools->Computer Management->Local Users and Groups part of the control panel -- but that's not necessary for this purpose. (In fact, all of the above can be done from here, if you like that interface better.)

That's it! You spent 5 minutes setting up accounts, and saved yourself HOURS and HOURS of maintenance re-installing Windows, uninstalling programs, removing Spybots and Adware, not to mention viruses.

Submitted by: Joe M.

**********************************************************************


Answer:

Debbie -

Assuming you're using Windows XP (or 2000), not Windows ME or 98:

Assign each of your kids a unique user ID with limited privileges.
Change the password on the Administrator account to something only you know, and then tell the kids that everyone will need to use their own ID when logging on to the computer.

In XP, you can display the users on your system via Start -> Control Panel -> User Accounts. To create a new account, click on "Add...".
In the Add New User dialog, type the user name you want to assign, leaving the domain blank (it will default to the name of your computer). Click Next. Select the "Restricted user (Users Group)"
option, and click Finish. Repeat for any other accounts you need to create. Each kid will need to select a password the next time they log in.

Next, in the User Accounts dialog, look for a checkbox labeled "Users must enter a user name and password to use this computer", and make sure it's checked. It may not be there on XP machines.

Finally (assuming you're logged in as Administrator), hit Ctrl-Alt-Del, select Change Password, and update your password to a value that only you know.

Keep in mind that you now must be logged in as Administrator to install software. Also keep in mind that your kids may have some trouble using some of the programs on the computer, due to the fact that they don't have permission to see the files. You will definitely want to test the applications that they use.

If you find a program they need that they can't run, I have been able to resolve many problems with permissions by exploring the program's subdirectory (as the Administrator user) under C:\Program Files (replace C:\ with whatever drive the program is loaded on). Once you find the program's subdirectory, right-click on the folder, and select Properties. Click on the Security tab, and the Advanced button.
Select the Users group, and click on Edit. Click on Full Control in the Allow column, and click OK. Finally, check the box next to "Replace permission entries on all child objects with entries shown here that apply to child objects". Click OK.

Hope it helps.


Submitted by: George R.

**********************************************************************


Answer:

Greetings. If your computer is running Windows XP (and most newer computers are,) here is your best bet to allow your kids to access the Internet but not download or install anything. (Note: this will also work on Windows 2000.)

First, make sure that your login has full rights and administrative access.
Next, go to Control Panel and select the Users option. Password-protect your account with a password that only you will know and remember - do not make it easy for them to guess: kids are relentless when they want their way!

Next, create a second user account JUST for them, and give it standard user access. It will severely limit them from downloading and installing programs. You may also need to change the Local Policy settings under the Administrative Tools area (you will need to enable "Classic View" on the Control Panel to be able to see the Administrative Tools options. In Local Policy, you can change security settings to allow only Administrator-level users to download, install, and modify programs and settings.

Finally, if you are using high-speed access (such as DSL or Broadband
Cable,) check with your service provider. For instance, Comcast offers a new product called "Security Manager" (available for Win98SE, WinME, Win2000, and WinXP) which has a built-in pop-up blocker, firewall, spyware protection, and parental control software that will allow you to easily set restrictions on what your kids can and can't do online. It is also password-protected and allows you to block access to vital areas of Windows such as Control Panel, Add/Remove Programs, and Internet Options, areas which kids can use to change things around and gain access to things you don't want them to access. Just make sure that you change your password (it works using the primary email account username and password) to something the kids will never figure out.

Hope this helps!

Submitted by: Pete

**********************************************************************


Answer:

Hello,

This is an attempt to answer this week's question by Debbie B. on how to prevent her children from downloading and installing things she doesn't want on her computer.

I'd say she's in luck if she has either of two operating systems:
Windows XP or Windows 2000. Both of these operating systems have provisions for user logons and each can establish "administrative" or normal user defined logons. The administrator (Debbie B.) would set up the user accounts with passwords, and set their degree of usability with their logons. In Debbie's case, she should set her older children with "administrative" rights and the younger ones with normal user rights.
To accomplish this task, she should go to the Control Panel and click on User Accounts and then setup each user as she sees fit. By doing this she allows the older children rights to download and install, but restricts the younger ones of these rights. If the younger children should try to download or install things on the computer, they will be prompted to see their local administrator in a dialogue popup box.

Best of luck.

Submitted by: Chuck F. of Boston, MA

**********************************************************************


Answer:

That's actually very simple:

If you are running W2K or XP, you probably made one default profile that gave all of you "administrator" rights. You need to set up accounts for the each of the kids limiting them to "user" access (In W2K, the path is Control Panel>Administrative Tools>Computer Management>Local Users and Groups>Users>Right-click to create new users). YOU set the names and the passwords and make them unchangeable by the kids. Then you need to set up a proper Administrator account for yourself that you only use for maintenance and DO NOT SHARE THE PASSWORD! After all that, change the password of your original default profile (if you want to keep it-likely if you have been using it a while and have a lot of material there) so that the kids can't get in that way. The added benefit of setting up separate profiles is that each family member can have their own customized desktop and personal folders that can't be tampered with by anyone but you (the administrator). You would also be able to see what your child is doing on the 'net based on their personal history folders. I know-not exactly cool, but if your son is playing with KaZaa (no matter what the excuse), it might be a way to open a dialog about computer safety.

Thanks much!
~~~~~AAAAAAAA< Beth
^ ^

Submitted by: Elizabeth P. of Las Vegas, Nevada

**********************************************************************

Answer:

These instructions for Windows XP (as I do not have any other version)

Setting restricted accounts is easy. Your children will be able to use the currently installed programs, but will not be able to install additional programs.
It can be done from the User Accounts control panel. To get there: click the Start button, and click on Control Panel, and open the User Accounts control panel.
1. First you have to create a new limited account, so click on "Create a new account"
2. Type a name for the account and click on "Next >"
3. From here make the account a limited account by choosing the "Limited" option and click on "Create Account".

Now you have to create a password for the account you're using.

1. First click on the "Home" button on top of the User Accounts window.
2. Click on your current account.
3. Click on "Create a Password"
4. From here put the password you would like to protect your current account with (so your kids won't be able to access it) and confirm by typing it in again and choose a hint for if you forget what it is.
5. Click on "Create Password"
6. Now choose if you want this accounts files and folders to be accessible by other accounts.

Now you're done.

Just to make sure all the changes were right click on the Start button > Log Off > Switch User

Click on the account you were just using, if it is asking for a password then it was right, if it didn't, try going over the instructions again to see where you went wrong.

Now tell your kids to logon to the computer using the account you just created. If they pick the current account you're using, they will be asked for a password, which you picked.

Submitted by: Daniel F.

**********************************************************************

Answer:

While this may be off topic, the first thing I would suggest is actually talking to your son and finding out what he gets out of intentionally disobeying you, because trying to prevent the installation of software is practically the same as trying to block write access (or the permission to write something) to your hard drive. It just isn't practical, though it may be possible.

Now, excuse me while I put my soapbox away and go on to address your question more directly. If you are running Windows 95/98/ME, it may be possible but I don't think the effort involved would be worth it. If, however, you are running Windows NT/2000/XP, you have a shot.

Under those Windows versions, you can set up a Group Policy and make your own allowances and restrictions about what runs (study your help file for more information) or you can also try giving your kids a Guest account, which automatically puts some tight restrictions on what your kids can run without a password. Be careful with this option because it can actually be too restrictive. I once tried to run Quicken using a guest account and I couldn't.


Submitted by: Daniel L. of Tucson, AZ


**********************************************************************

Answer:

I had a similar problem and struggled with it for several years before coming to the conclusion that it was a hardware problem rather than a software or operating system problem. In simplest terms, just provide a separate hard drive for each of the computer's users. Since it is virtually impossible to prevent another user from accessing problematic sites, even by accident, it stands to reason that limiting the problems that ensue from that user's behavior to only their files and operating system is the most effective way to keep the viruses and adware and application bloat from infecting everyone else's files.

Here's how I did it. I purchased a drive rack that is installed into an open drive bay of the computer. I then purchased a separate drive for each of the users and installed the operating system on one of the drives followed by all the application software that would be used by all users. I then cloned that drive to each of the other drives so that I then had as many fully functional drives as I had users. When I use the computer, I simply insert my drive into the bay and turn on the computer. The only files on my drive are my files. No one has used it since I last did and so nothing is out of place, nothing is contaminated and I can just go to work. I have since installed additional applications that do not exist on the other users' drives and that has no effect on their ability to use the computer and nothing that they have done has any effect on my ability to use it either.

One surprising benefit that occurred resulted because I have a second computer in another location. I purchased both computers at the same time and had them configured identically. By putting a rack in the second computer, I can just unplug my drive from the one computer, carry it to the other and plug it in. This way I can take my work with me anytime I need it at the other location. Because transporting the drive gave me cause for concern, I subsequently added a second drive rack in my home office machine and now I clone the drive before I leave for the other location. That way, I have a perfect duplicate of my data and operating system so that, in the unlikely event something happens to my drive, I do not lose any of my data. In fact, I have become so paranoid that I now have an additional clone of the drive in a safe location (in fact, a fireproof safe) and I can rest easy.


Submitted by: Bruce P. of New Port Richey, Florida USA

**********************************************************************

Answer:

The best way to protect important data is to have a slot with a frame for exchangeable Hard Disk Drive (HDD). Then you can take out your own system disk and provide other system disks for your kids. It is a good education that kids learn how to keep there own system disk (HDD) clean. Also kids should get basic lessons what they allowed to do and what not. Therefore tell them about what is legal and what could cause trouble. You can not limit the access to the Internet but you can educate kids how to surf save and to be responsible for there actions. You will see that you kids need your help and they will have a lot of questions how to make there system disk operational again after they mess up there own operation system.

Submitted by: Werner

In case you don't have XP or 2K, there is a free utility called we-blocker. It's an internet filter thaqt works well. I used it for my children prior to the release of 2K and finally XP. It allows you to block web-sites not for children. The data base is kept up by a national regiostry and you can add your own custom filters. To prevent installs, you can block webiste with .exe and .zip files in them. Although this may cause an undesirable web surfing experience for you children, it may help solve the issue until you can upgrade your OS.

And don't forget about spuware utilities.... I am now dealing with that on thier computers...

Lenny

I have XP Home, SP2, where is the Power User option for User accounts?

The only draw back w/my son logging on as a User (w/limited access) is that he can not update virus definitions and I do not see the globe in the System Tray informing us of new Windows updates. I only see this when in the Administrator account.

KEYLOGGER!! You can install a totally stealthy program called a keylogger. It sits in the background, completely hidden from the Task Manager, Add/Remove Software window and Start Menu. The little brute records every single key typed, mouse clicked, webpage visited and chat chatted. It can take periodic screen shots, and all the results can be automatically e-mailed to you. I personally use one called XPCSpy Pro, available from http://www.x-pcsoft.com/index.html . It's pricey, but it works very well, particularly for interfacing with various chat programs. (hint: Astalavista.com). Otherwise, Google searh for "keylogger" and you'll find a plethora of programs that basically all do the same thing: record a user's activities without their knowing it. I have it installed on numerous computers on our work network, and my wife, God bless her, can't type a thing without my knowing. The kids are 10, 8 and 6 - haven't gotten into mischief, yet. But, unless they outgrow my 'puter know-how, I'll know when they start. The trick is, never tip your hand - don't reveal how you know, or ignore the mild infractions altogether. Once the cat's out of the bag, your mystical, all-knowing patriarchical (matri?) image will be blown. Good Luck.

pms: that story by the guy who had to leave the county because of his smut-peddling brat blew me away! Pretty scary....

***