Denying specific folder access to a user account in windows xp

wedoe21

Limp Gawd
Joined
Apr 29, 2002
Messages
488
Is there a way pick which folders a user account can access? Id like to deny access to all folders but 2 to one user. I dont even want them to be able to see inside the folders. can i also prevent them from installing and altering the system? The user accounts menu does nothing specific like that at all.
 
Sure, just use permissions.

Systems folders are a no-no, so you can't really lock out documents and settings, program files, or the Windows directory unless you granularize everything (major PITA), but you can certainly lock them down by removing the folder (namely read) permissions (never ever ever deny!).

Otherwise, make their user account a plain vanilla user account. Nothing other than the membership of the Users group.

Actually if you feel saucy, fire up mmc from a command prompt, then File->Add/Remove Snap-In, click Add, choose Group Policy Object Editor, click OK, OK, then nose around in the Administrative Templates under User Configuration.
 
Deny is fine if you have a reason for it. Don't use it if you don't need it, but never say never.
 
Back
Top