Windows 10: How do I restrict the permission to execute for a user, system-wide?

I have just installed a new Windows 11 and I want to be very strict about allowing my user to execute programs. This is an experiment to get less dependent on an antivirus. I want to allow the user to execute only specific programs that I specify somehow somewhere, or programs from specific directories. If I would like to execute from another folder, I want to have to change permissions in executable's properties, I don't want safe screens with password prompts and so... Now I have a few ideas and my question is what would be advisable.The only user right now is an Administrator user called "A

:)

 

Unable to set restriction for local user in Windows 10

Hi,



I realized your concern and will assist you to resolve the issue.

• 
  How did you noticed that user is still able to access the drive?
  
• 
  Did you log into the local user account and check the permission?
  

I suggest you to follow the steps below to restrict the user.

• In File Explorer, right click on the drive which you want to restrict.
• Click Properties.
• Click the Security tab.
• Click on Edit to change the permissions.
• Uncheck all the permission for system.
• Click OK and make sure the change is applied to all subfolders and files.

Your reply is very important for us to ensure a proper resolution. Please get back to us with the above information in order to assist you accordingly.

Thanks and regards.

 

Making a restricted user account

There is this:
https://support.microsoft.com/en-au/...rosoft-privacy

but note when you look at the Settings options it says




For folders, 'List folder contents' can be assigned permissions- how helpful that might be for O/S folders and what adverse effects it could have if restricted for a given user I have no idea. Just a thought..




Permissions for data is the relatively easy bit.

 

Need to restrict user access

Hi,

I suggest you to create guest account. Guest account is designed for users who require temporary access to a computer and don’t need to store their user-specific profile settings permanently. Users who log on as a guest have
a very limited set of permissions. For example, they cannot access other users’ files or perform system wide tasks such as installing software or hardware.

For security reasons, the built-in Guest account is disabled by default. This prevents users from having an option to log on to the system as Guest.

Files on the root of C: are available to the guest account in order to allow it to run properly, but files in the "Users" folder are not unless someone gave the guest user folder permissions.

To enable the guest account I would suggest you to try the following steps.

a. Type This PC in the search bar.

b. Right-click This PC , and then click Manage.

c. Click Local Users and Groups.

d. Click Users.

f. Right-click the Guest account, choose Properties.

g. On the General tab, select Account is Enabled.

h. Click Ok.

Hope this information is helpful and do let us know if you need further assistance. We will be glad to assist.