We have written about how to prevent users from connecting to your computer over a network. On this post we will look at how to enable more restrictions on critical operations like system shutdown and changing the system time. You should be an administrator on a Windows PC to be able to do the steps below.
Open the Local Security Settings using the Control Panel or by typing “secpol.msc” on the Run menu:
On the left side you will see a tree like directory. Go to the Local Policies then choose User Rights Assignment. At the right side, double click a policy name called “Back up files and directories”:
Warning: before continuing make sure you know that by changing the settings here you could remove someone’s capability to run a process like backup and restore.
You should see the window like below open. Click Add User or Group to add more users that you want to have access to the back up process. In contrast, you can choose remove to remove users or groups to the list.
Click Add User or Group to allow others to run the process. Sometimes we don’t exactly know the actual username of the person or group that we want to add. To search for all users, click “Find Now” to search for all names:
Choose the name that you want to allow then click OK. Confirm the addition of names on the “Select Users or Groups” window. Click OK to add the name you entered. In the example below I added the name “Everyone” so that means anyone can run the process:
The same steps could be used to set users for other policies like system shutdown and file restoration. Just click the policy name that you want to update then add or remove users.
You may use the tips above to allow or restrict users for each policy.
Ben Carigtan shows you how it’s done.