Blocking hard drives and folders...

Forums › Microsoft Windows › Blocking hard drives and folders...

kiwis

832 posts

Ultimate Geek

#19336 13-Feb-2008 10:19

I have two users on my PC (XP Pro) and I want to block the othre user from access my D drive (just a normal 40Gb hard drive) and some selected folders on the C drive, only because there are some sensitive work files in these locations...

I know I need to do this with the general group policy but how????

chiefie

I iz your trusted friend
5877 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#110331 13-Feb-2008 10:28

Windows XP/Vista with NTFS? Please give a bit more specific details on what OS, and how familiar are you with the OS and setting security etc.

Make sure you have 2 user accounts. Give the other person member of Local User, you can either be Local User or keep as Administrator.

On the folder/drive that you want to protect, right-click > Properties, select Security. Make sure your username is added and with Full Control. Add the other user and specifically "Denied" for Full Control.

If you have a group of people that you want to exclude, it is easier and wiser to create a new group and put them as member of this group, then repeat the above suggestion but instead of User, add Group.

Internet is my backyard...

«Geekzone blog: Tech 'n Chips Takeaway» «Personal blog: And then...»

Please read the Geekzone's FUG

kiwis

832 posts

Ultimate Geek

#110333 13-Feb-2008 10:37

chiefie: Windows XP/Vista with NTFS? Please give a bit more specific details on what OS, and how familiar are you with the OS and setting security etc.

I know next to nothing about it. I have XP pro. What is NFTS??

Make sure you have 2 user accounts. Give the other person member of Local User, you can either be Local User or keep as Administrator.

Yip have this, one limited account, one admin

On the folder/drive that you want to protect, right-click > Properties, select Security. Make sure your username is added and with Full Control. Add the other user and specifically "Denied" for Full Control.

Hmm I've got explorer open and have hit right click on the drive but have no Security tab under the properties???

I have on a folder under "sharing & security" but it's disbaled???

chiefie

I iz your trusted friend
5877 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#110341 13-Feb-2008 10:55

Your hard drive has to be NTFS first.

From My Computer, right-click on C: (or whichever hard drive) and Properties. From the Properties window, it should say File System: NTFS. If not, then you'll have to convert it. WARNING: Doing this at your own risk, to minimise any chances of corrupting your files, do a full system backup first.

Internet is my backyard...

«Geekzone blog: Tech 'n Chips Takeaway» «Personal blog: And then...»

Please read the Geekzone's FUG

kiwis

832 posts

Ultimate Geek

#110358 13-Feb-2008 12:13

Hmmm it's already NFTS, so why can I not change the security settings??

Mattnzl

281 posts

Ultimate Geek

#110360 13-Feb-2008 12:23

Also have to turn off "Use Simple File Sharing". In Explorer: Tools -> Folder Options -> View
Right at the bottom of the list.

kiwis

832 posts

Ultimate Geek

#110365 13-Feb-2008 12:51

Great so I can disable this from being shared? But when i log in as a visitor I can still access D drive??? Do I need to do something else?

chiefie

I iz your trusted friend
5877 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#110366 13-Feb-2008 13:00

"Visitor" as in Guest?

Anyway. look under "Security" not "Sharing". Under Security, it usually have "Administrators" "Creator Owner" "System" "Users".

What you'll do is add yourself as Allow "Full Control" and add the other account and Deny "Full Control".

If in the Sharing, shows "Share this folder" and share name as "D$" (for drive level only), it is default to that. Anything end with $ is a hidden share, usually for administrative reason. It can be removed but best keep it as it is. If the other user was denied Full Control, they will not able to get to this share, regardless.

Internet is my backyard...

«Geekzone blog: Tech 'n Chips Takeaway» «Personal blog: And then...»

Please read the Geekzone's FUG

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

kiwis

832 posts

Ultimate Geek

#110387 13-Feb-2008 14:21

Cool thanks heaps!

How do I block other things i.e. Access to the control panel? internet history?

chiefie

I iz your trusted friend
5877 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#110392 13-Feb-2008 14:33

ummm... Control Panel will be via Group policy (i believe) as for Internet Temp, each user controls their own application data. The other user will not be able to get into your profile folder (under \Documents and Settings) anyway.

What are you trying to achieve? How much lock down are you looking for/at? There's a Windows SteadyState add on.

Internet is my backyard...

«Geekzone blog: Tech 'n Chips Takeaway» «Personal blog: And then...»

Please read the Geekzone's FUG

kiwis

832 posts

Ultimate Geek

#110398 13-Feb-2008 14:39

Unsure yet, just locking my files and folders but also wondering how to keep my computer safe from other users..

Hmmm I've locked myself out of D drive now.. is there any ay i can fix this?

coffeebaron

6235 posts

Uber Geek

Trusted

Lifetime subscriber

#110446 13-Feb-2008 17:44

kiwis: Unsure yet, just locking my files and folders but also wondering how to keep my computer safe from other users..

Hmmm I've locked myself out of D drive now.. is there any ay i can fix this?

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

kiwis

832 posts

Ultimate Geek

#110452 13-Feb-2008 18:06

Yip all sorted!!!! cheers for all the help today