Win2KPro-DifferentLogOnUsers

What you'll need to do here is either shrink the Partition size down to about 50% of your current HDD and reload Windows onto the second Partition or alternatively you can install a second HDD and use it as a Slave and Load Y2K onto that and [b]Dual Boot.[/b]

Once you have the second Drive/Partition Loaded you can then copy over that users files and they can mess up that system as much as they like without hurting any other user on the other Boot Option.

While you can install 2 copies of Windows onto the same partition this is defiantly [b]Not Recommended[/b] as anything that adversely affects one copy of Windows will affect any loaded programs as well. You may even find that by installing the necessary software on the same partition as the original install will stop that software from working.

Col

Another solution that I like to use for, shall we say, problem users is Virtual PC. Virtual PC allows you to set up a virtual computer for the user that when turned off deletes all changes. You can also share a folder or two on the real PC so data isn't dropped.

In this way, each user can literally have their own PC and if the problem user hoses theirs up via spyware or whatever then you turn it off and Delete Changes. You can also keep a copy of the virtual hard drive handy in case the user commits some problematic changes to the one (s)he's using. This allows for what amounts to an almost instant re-image of the computer.

I've used this technique quite successfully with Virtual PC, there are free virtualization programs you can get as well such as VMWare. I use the Microsoft one mainly because, well, I get the cheap MS store rates. :-D

If you want to keep the different users separate your only option is to Dual Boot the computer and establish 2 different copies of Y2K one for each of the users to log onto. That way when one user Trashes the OS the other users account will not be affected. The down side of this is that you [b]Can Not[/b] Safely install 2 copies of Windows to the same partition so you'll need to either create another partition by shrink one down or installing another HDD.

If you Goggle Partition Managers there may be a free one available for you to shrink your existing partition down failing that you can buy a copy of Partition Magic or fit another HDD a 80 GIG drive is really cheap and easy to fit.

While you can still get a PATA, ATA or IDE 40 GIG HDD I would not recommend this as the 80 GIG unit is only $16.00 AU more expensive so by buying an 80 GIG HDD you are getting much better value for your money. I'm not sure now but the last time that I looked a Copy of Partition Magic was slightly more expensive than a HDD but if you have more use than just 1 application this may be the way to go.

Col

The best way to keep the users out of each other's files, then, is to specifically deny access to the data directories for those users only. I would never (NEVER) advise doing so on a group as you run the risk of locking out someone you don't want to.

To accomplish this, you'll simply create a separate account on the PC for each user. Here are the steps for that in case you're unsure (or for others who may be).

1. Click Start, go to Settings and click Control Panel.
2. Double click "Users and Passwords".
3. Make sure the "Users must enter a user name and password" box is checked.
4. Click the Add button and use the wizard to set up a user.

I'd leave most users as a Standard User (Power Users group), generally. You could set them up as "Restricted" (Users group) but that makes some apps not work. Be prepared to change them to Standard users if programs don't work. Due to the length of these steps, I've added a second answer with the actual Deny portion.

Once you've got a separate user account for each real user, you need to restrict permissions. The easiest way to do so is to log each user on so the directories are created. Once that's done, log onto the local Administrator account and follow these steps:

NOTE: Using these steps will deny access to an area of the hard drive to certain users. Do NOT (NOT!) ever deny access to a group or to the Administrator account. Deny settings OVERRIDE any Allow settings and you can screw yourself up beyond belief if you deny access to ANYTHING fro the Administrator. Leave that account alone, never use it except for system-wide things like installing apps, and procedures like this. Ignore this advice at your own risk and peril.

1. Double click the My Computer icon on the Desktop.
2. Double click "Local Disk (C:)".
3. Double click "Documents and Settings".
4. Right click a user's directory and choose Properties.
5. Click the Security tab and click the Add button.
6. Find the user you wish to keep out of this user's data and double click their entry. Repeat if you need to keep more than one person out of this user's data then click OK.
7. Click the User in the list if it's not already chosen and click the Full Control box under the Deny column.
8. Click Apply then Yes at the "scary warning" (you did read mine above, right?!). Repeat for any other users to be restricted from this directory then click OK.
9. Repeat steps 4 through 8 for any other user's directories.

This should never be done on any other directories. Users usually need some access to all directories on a system except other user's directories in Documents and Settings. There may be exceptions to this rule if you created a different directory but it's best to leave well enough alone if you don't understand fully the implications of Denying access in this manner.