Windows 2000: Tips for New Arrivals

Controlling Security

Windows 2000 knows who you are. Before starting a session, you must have a user account with its own password. Even Default Users can use a password of no characters, but it must exist before you can get on. But this tactic can keep your desktop settings and document history away from prying eyes--since each user's settings are stored in a unique folder under the Documents and Settings on the hard disk that contains Windows 2000.

Keep Your Secrets

There are two quick ways to keep people away from your desktop when you leave your machine for a while. Both involve pressing Ctrl-Alt-Delete. In Win 9x, the Task Manager box pops up with a three-finger salute. In Windows 2000, this key combo kicks up a six-button multiple-choice dialog box. Click Lock Computer, and your session is blanked out until you reenter your user name and password. When you're done with your session, click the Log Off button.

Create a New User

If you want to allow access to your computer, but not to your desktop, documents, and so on, create a new user account. User accounts can be restricted at many levels, and can be set up in the Control Panel's Users and Passwords applet. Press its Add button, assign a user name and optionally, a full name, and description of the user. Click Next, and enter a password for the new user.

On the next screen, you're faced with three choices of security level: Standard user, Restricted user, and Other. Standard and Restricted users can access programs and save documents, though neither can access other people's files without permission. Restricted users can't install software. The Other option allows a wider set of permissions, from omnipotent Administrators to Backup Operators, who can only run backup software. Pick the new user's restriction, click Finish, then OK.

Restrict User Privileges

Whether you work in an office setting or at home, there are always some files and settings you want to protect from prying eyes or clumsy tinkering. Windows 2000 can help by enabling you to specify each user's access privileges.

Log on to Windows 2000 with an administrator-level account and select Start, Settings, Control Panel, Users and Passwords. Select the user name, and click the Properties button. Click the Group Membership tab, and select an appropriate level, such as "Restricted users," or in the Other drop-down list, Guests.

Encrypt Files or Folders

Windows 2000's file storage system NTFS enables you to encrypt files and folders on your hard disk. To do this, right-click a file or folder you want to encrypt and select Properties. Under the General tab, select Advanced. Click a check mark in the box labeled "Encrypt contents to secure data." When you encrypt a folder, you'll be asked whether you want to encrypt all the files and subfolders in it. No matter what you choose, all files and subfolders subsequently added to the folder will be encrypted as they are added.

This technique has some restrictions. You can't encrypt folders containing system files or compressed files and folders. If you have checked off the Compress option, you must uncheck it before you can encrypt.

Lock Your Doors

Under NT 4.0 and now under Windows 2000, all new users logging on must press Ctrl-Alt-Delete to perform a secure boot. But this process, anomalous for Win 9x veterans, adds a degree of security against casual snoops, and it's a Microsoft-recommended option in Win 2000. To turn it on, select Start, Settings, Control Panel, Users and Passwords. Click the Advanced tab, and place a check mark in the box labeled "Require users to press Ctrl-Alt-Delete before logging on."