A computer with Windows 10 Pro has several users (let's use administrator A and standard users B and C as examples). In addition to the already existing standard folders (in the /users/), I would like to make further folders that only a specific user has access to, possibly on other drives. I don't mind if the administrator account(s) can have access to those folders. But the other regular users should not have access.

I have found instructions about restricting access by other users (for example here). The advice is to prohibit user B's folder from user C (and possible other already existing users). But this approach has at least two major flaws:

1. If you have many users, it's quite cumbersome to go through all new folders and prohibit all others of using them. 2)
2. If the computer has a new user (say, D), the new user will have access to B's and C's private folders (unless the administrator who created the account remembers to assign the appropriate prohibitions).

So is there a way to define folder permissions in such a way that all other users cannot access the folder by default? I'm thinking of setting something in the permissions of the user's folder, not something that affects the folder functions in a more complicated manner.

3 Answers

Disable permission inheritance for those folders. Then remove the "Users" or "Everyone" access entries, replacing them with just the specific accounts or groups that you need to grant access to. Everyone else will be automatically denied access.

Windows permissions are generally evaluated in this order:

1. If a user matches a "Deny" entry, they're denied the permission.
2. If a user matches an "Allow" entry, they're granted the permission.
3. If a user doesn't match any entries, they're denied the permission.

7

This Thing Work in Most of Windows

Follow the Following Steps:-

• Firstly open the Folder in Windows Explorer
• Right Click on Folder
• Select Properties
• a New Window appears
• Goto Security tab
• Click on Edit Button
• Select Users, it Will be Displayed as (Computername/Users)
• Check Full Control in Deny row...... And you are Done

3

I followed @user1686 's answer which is accurate and self explanatory, I would although improvise on steps for novice users below:

1. Right click folder > Properties > Security > Advanced > Disable inheritance > Convert inherited permissions into explicit permissions on this object > Apply.
2. Explicitly add your user that should continue to have access, to this list by clicking Add > Select a principal > type Username > Check names > (ensure it has guessed correct user) > Ok. Now ensure Type is set to: Allow > tick [ ] Full control > Ok.
3. click on below entries and click Remove one by one:

 a. Authenticated Users b. Users (your-PC-Name/Users)

4. in Advanced, tick [ ] Replace all child object permission entries with inheritable permission entries > Apply > Ok.

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password Submit

Post as a guest

Post Your Answer Discard

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy