Controlling Access

1. Create three Password-controlled access objects, one each for the System folder, the Applications folder, and the Workplace Shell Extensions object. While creating any of these three, set the Master password. Also create two LAN-controlled access control objects, one each for the Admin and Users groups.- Go to the WPS Extensions Settings Notebook, Protection page, click your <right mouse button > in the container, and select the Add control object menu item.
2. Enable and configure access controls for each folder - Go to the Access policies page of each folder's settings notebook. Enable object access control and select the access control objects as follows. Be sure to select LAN-Controlled before Password-controlled objects, as the Workplace Shell Extensions will evaluate access policies in the order they were assigned.

FolderControlled   OperationAccess            Control Object
System             Open, excluding settings   LAN-controlled Admin
System             Open, excluding settings   Password-controlled *
System             Settings open              LAN-controlled Admin
* for use when not logged on

FolderControlled   OperationAccess            Control Object
App's              Open, excluding settings   LAN-controlled User
App's              Open, excluding settings   Password-controlled *
App's              Object visible             LAN-controlled User
App's              Settings open              LAN-controlled Admin
* for use when not logged on

FolderControlled   OperationAccess            Control Object
Personal           Object visible             LAN-controlled User
Personal           Open, excluding settings   LAN-controlled User
Personal           Settings open              LAN-controlled Admin

The master password can be used to perform any operation on any object restricted by a Password-controlled access control object.