Help restrict access to folders to non-administrators

[Sergiu DUDNIC]

Hello,

I have the following problem:
I am admiministrator on the computer under Win Vista Ultimate.

Now, I would like to restrict acces for several folders on the D:\ drive for
non-administrators.

I use the "security" tab. The problem is that if I "deny all" for
"MyPC/Users", then I lose the access for me too.... (

I can restrict users separately indicating them in the list, but if I add a
new nonadministrator on the computer I must readd them manually for all
restricted folders.

I would like to restrict all the non-admins, but ONLY non-admins. I tryed
also to create a separated group "non-administrators" where I add all the
people that is not admins manually... but I don't like this idea... it
should be a simplest way to do it under Vista.


Any help will be greatly appreciated.


PS. I wonder if I can restrict using Internet for several users under Vista.
Is this possible?

 

[Mick Murphy]

http://technet.microsoft.com/en-us/library/bb727037.aspx

Have a read of the above link.
It depends how serious you are about this.
You don't mention number of workstations, etc.

You might be better with Server 2003, where you can set eveything up in the
Active Directory; Global Groups, Local Groups, the lot!

 

[Meinolf Weber]

Hello Sergiu,

As you already said, create a group, add all user accounts to it and configure
the security on the folder. That's the way it works since years, has nothing
to do with Vista. Even in Server OS it will be handled the same.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Kerry Brown]

It is best never to use "deny" permissions. Deny always overrides Allow.
This can have unexpected consequences as you have found out. You should
decide who needs access, create a group for them, give them access, and
remove other groups and users. Don't remove the system accounts like System,
Trusted Installer, or Administrators.