How can I deny user access to c:?

Microsoft Windows vista ultimate - 32-bi...
July 23, 2010 at 12:11:21
Specs: Windows Vista
Hi! Have granted to user-account admin-rights. Would like to hide in user-accounts-explorer-windows: c:\-drive, but without at the same time giving up users admin-rights. Can this be done? Advance thanks for help!

See More: How can I deny user access to c:?

Report •


#1
July 23, 2010 at 12:49:53
Clarification of my above request:

Quote: Hi! Have granted to user-account admin-rights. Would like to hide in user-accounts-explorer-windows: c:\-drive...

c:\-drive: I'm talking about the "OS"-Drive, or rather just the normally visible link in (users) explorer-windows.

Again thanks in advance for any help!


Report •

#2
July 23, 2010 at 13:27:06
If you have given users admin rights they can see and do just about anything they want to. Any rights they do not have they can assign themselves. This is inherent in the admin account.

If you wish to restrict users they must use a more limited account.

Be very careful when changing file and folder permissions. Some of the implications are far from obvious.


Report •

#3
July 23, 2010 at 13:48:00
Hi LMiller7!
Many thanks! See: It is in this case no problem that my user account (after having somehow 'hidden' the OS-link in the explorer) keeps admin rights.
The point is that I just want to pretend to someone else that I have no admin-rights when I'm in my user-account. So if a new collegue (he knows very little about computers) ask me again to install anything for him to 'play with', I simply say: "sorry pal, but this is my bosses pc and I cannot install anything for lack of admin-rights" and I "proof" it by opening the explorer to show there's 'no access' to c:-drive.

That's the point; I don't want to let him on my pc at all, especially not for playing games cause I heard he quickly gets 'permenently glued' to the seat when doing this.

Sorry for this extensive explaination... So if you know a way to make "OS" (c:\-drive) invisible in users explorer without having to limit rights there (and without affecting funktion of administrator!), then I'd be happy and greatful. Thanks again!


Report •

Related Solutions

#4
July 23, 2010 at 14:02:03
You can simply say no full stop to using the pc. Tell him it's a business pc belonging to the company not to used by anyone else, and all keystrkes are logged.

Report •

#5
July 23, 2010 at 16:01:43
The way to keep unauthorized people off your computer is to have a decent password and lock the computer when you are away. When you return just enter your regular password. Any admin can also unlock the computer.

http://support.microsoft.com/kb/294317


Report •

#6
July 23, 2010 at 18:00:40
The problem that C should never have been allowed access. You let them have access to any folder that they own but never the root of C:.

Make them a limited user.

I support the 'Everybody Draw Mohammed Day'. A religion doesn't deny my freedom.


Report •

#7
July 24, 2010 at 03:53:22
Hey thanks ye'all for your friendly advises! The whole point is, I'm myself the only one using the pc, generally workin on the user-account. I don't let anyone else use it. All I'm really looking for, is a way to have c:\ not show up on my explorer. I know that I can still have access to c: (e.g. via cmd). It would be just a nice thing to p r e t e n d that I have no access, by 'hiding' that OS-drive in my explorer. That's all I'm trying to find out: is this technically possible?? - yours truly :-)

Report •

#8
July 25, 2010 at 13:07:34
If you have a higher end version of MS product they allow you to hide folders from view. If you do have the ultimate then you can change ntfs permissions. See help and support pages.

You don't want to delete admin from having access to C:\.

Again you want to always use a limited user account for all users.

I support the 'Everybody Draw Mohammed Day'. A religion doesn't deny my freedom.


Report •

#9
November 11, 2010 at 15:36:42
BUMP!... Ok well if you are using Windows 7 (and this may work with other OS's) Simply open up My Computer and right click on the c: drive. Select properties, security, and click on the user that you want to modify this for. Under the choices, un-select all check marks and click apply. Now, there may be some errors that come up, but if it gives you the option to 'Continue', then click continue. When you try to access the C: drive, it will say access denied. Note that users with administrative rights can change this by doing the method above and selecting the boxes again. But for someone who doesn't know about computers, they won't even think of it. Be sure to change this back too, after he is done using it and every time you want to access the c: drive. I don't know if you have found a solution to your problem, but I hope this helps.

Report •


Ask Question