Windows 10: Create a Standard user with only Install permissions and restrict it to edit other Admin...

Create a Standard user in Windows 11 with only Install permissions and restrict it to edit Admin Users.

:)

 

Want to restrict standard user account to share any folder and sub-files, but admin account can share that folder and sub-files.

I Want to Restrict the Standard User Account from Sharing Any folder and files but the Admin Account Can Share that folder and files.

Till now I have used :- ( I'm Using Windows 11 pro edition )

Create a New User Group:

• In the Local Users and Groups window, right-click on "Groups" and select "New Group."
  
• Name the group (e.g., "RestrictedUsers") and click "Create."
  

1. Assign Permissions to the Folder:
   
   • Navigate to the folder you want to restrict in File Explorer.
     
   • Right-click on the folder, select "Properties," and go to the "Security" tab.
     
2. Remove Sharing Permissions for Standard Users:
   
   • In the Security tab, click on "Edit" or "Advanced" to modify permissions.
     
   • Select the standard user group (e.g., "Users") from the list and click "Remove" to revoke sharing permissions.
     
   • Click "Apply" and then "OK" to save the changes.
     
3. Add Standard Users to the Restricted Group:
   
   • In the Local Users and Groups window (lusrmgr.msc), double-click on the group you created (e.g., "RestrictedUsers").
     
   • Click "Add" and add the standard user accounts you want to restrict from sharing.
     
   • Click "Apply" and then "OK" to save the changes.
     

Is there any other alternate method to restrict the standard account to share file-folder?

 

Need some restriction of my standard user in my PC

The easiest way to restrict a standard user from accessing the files of another user account is by ensuring that the files are saved to the
C:\Users\<AdministratorUsername> folder or the %userprofiles% folder. If a standard user attempts to access the files from the said folder, by default, it would instantly prompt for the administrator's credentials in order
to access it.

If you wish to put restrictions on a specific file, you may follow the steps below:

• Right-click on the specific file and choose Properties.
  
• Choose Security tab.
  
• Click Edit.
  
• Choose Add.
  
• Type the username, click Check Name and then, hit
  OK.
  
• You can now manage the restrictions for the user profile, under Permissions for <username>.

If you wanted to set a restriction on the Local Drive, follow these steps:

• Double-click This PC.
  
• Right-click on Local Disk (C.
  
• Choose Properties.
  
• Select Security tab.
  
• Click Edit.
  
• Choose Add.
  
• Type the username, click Check Name and then, hit OK.
• Set the level of restriction for the said drive.

Should you need further assistance, feel free to get back to us.

 

Standard user can install apps from microsoft store without admin permission

Hi,

Win10 Pro computer join to AzureAD and in windows there is one local admin user and one standard user. user login as standard user but can install apps from microsoft store without admin permission. When we run setup file to install application its asking
for admin credential but if we install app from Microsoft store its installed and no asking for admin credential.

Could you please explain why this happen and how to restrict to install apps from Microsoft store for standard user.

Thanks,

Rocky