Limiting access to drive partition

[m_ridzon]

I have my harddrive divided into 2 partitions. One is C drive, which has the
Windows XP SP2 operating system on it. The other is D drive which is for
file storage. I have multiple users on this computer. I only want one user
to have access to D drive. Is there a way I can make D drive private so
other users cannot access the files on that drive? Or can I somehow create a
subdirectory in D drive that is private?

M Ridzon

 

[Shenan Stanley]

I have my harddrive divided into 2 partitions. One is C drive,
which has the Windows XP SP2 operating system on it. The other is
D drive which is for file storage. I have multiple users on this
computer. I only want one user to have access to D drive. Is
there a way I can make D drive private so other users cannot access
the files on that drive? Or can I somehow create a subdirectory in
D drive that is private?

File and Folder permissions. All D:\ is - a folder...

http://www.microsoft.com/windowsxp/using/security/learnmore/accesscontrol.mspx

If you have Windows XP Home - you'll need to boot into safe mode as the
"ADMINISTRATOR"...

Also notice that if anyone else has/can get administrative rights - they can
still get to your files. Your only choice to get around that - file
encryption. If you choose that route - read up and understand the
consequences and best practices!

 

[m_ridzon]

Shenan,

All users on the computer have administration rights so I have to be careful
about how I do this. I messed around with it a little bit. From what I can
see, it looks like I can go into the Folder Options, disable Simple File
Sharing and then set the other users to have no access to the folder. Then I
can go back into Folder Options and turn Simple File Sharing on. The other
users will still be prohibited from accessing the files and the security tab
disappears from the folder properties box. Therefore, a user would not be
able to go into the folder from their account and change the owner and thus
gain access to the files. If somebody is smart enough though, they can go
back into Folder Options, disable simple file sharing, and gain access by
changing the owner. I don't think I'll have that problem though knowing that
these users are not highly computer literate!

Thanks for your help.

M Ridzon

 

[Steve Riley [MSFT]]

There are also command-line utilities a determined person could use to
obtain access.

However, your last sentence gives away the primary reason these users should
NOT be local administrators.

 

[Bennett Marco]

dude there is a good solution for the problem...

Dude, "dude" left the room a freaking year ago.

Wake up.