File permissions

[chad]

I have been playing around with Local Security Policy for
the past hour, and I have had no luck. Im trying to set
privledges for an another use that logs on locally to my
computer. I figured out how to deny access to an
executeable file, but dont know how to do it for any
other type of file. I am maily trying to deny the person
access to the downloads file.
Your help is appreciated

 

[Kirk]

Sorry I can't help you but you say you have figured out
how to deny access to an exe.

How do you do this?

 

[Doug Knox MS-MVP]

You cannot password protect individual folders in XP. You restrict access by assigning permissions to drives, folders and files.
To do this, you must be running NTFS as your file system on the drive in question. If your hard disk/partition is not NTFS you will need to convert it. To do this, open a Command Prompt window and enter the following command:

CONVERT X: /FS:NTFS

Where X: is the drive letter you wish to convert. You may also want to see http://www.aumha.org/a/ntfscvt.htm to ensure that you're getting the optimal conversion.

After this step is completed and you've rebooted the computer, if necessary:

XP PRO: In Windows Explorer, go to Tools, Folder Options, View and uncheck Use Simple File Sharing. Now, when you right click on a drive, folder or file (on an NTFS partition) and select Properties, you'll see a Security tab. Here you can assign or deny permissions based on user name or user group membership.

XP Home: By default, you can only make files and folders under My Documents "private". This is done by right clicking a folder or file and selecting Properties, Sharing. To change the permissions on other folders, you need to boot the computer to Safe Mode and log in on the built in Administrator account. In this mode, you'll see the Security tab in Properties, and you can assign permissions based on user name or group membership.

How Do I Get the Security Tab in Properties - XP Home (makes the Security tab appear outside of Safe Mode)
http://www.dougknox.com, Win XP Tips section

HOW TO: Set, View, Change, or Remove File and Folder Permissions in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

HOW TO: Set, View, Change, or Remove Special Permissions for Files and Folders
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419

HOW TO: Disable Simplified Sharing and Password-Protect a Shared Folder in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;307874

 

[Chad]

Kirk, to deny acess to an executeable file go to admin
tools and then to local security policy. Once there
click on Software restriction policies. There should be
4 that deal with the system roots. Right click in the
open space underneath them and select New Hash Rule.
Then select the actual .exe file and make sure that the
security level is disallowed. If you want to stop people
from installing programs the just deny them access

If you have another question make a new post becasue this
one will be on the second page soon