Windows 10: How to Create MUlti-user Folder Security for a School Setting

I asked in a previous thread a related but it never lead to a useful solution, so I will try again.

I have . a computer(s) that I want to use in a multi-user situation where I will be adding and removing uses based on the school semester. One these computers I've installed a separate drive (X:\) for user data. What I would like to do is create an environment where each user sees X: as their own personal drive. Meaning that all other users file/folder are hidden and unavailable. As alternate solution, it would be acceptable to create a folder for each user and that any user cannot see the contents of other user folder. Either solution would work. From a maintenance point of view, when a user is added I'd like to update security for that user and only that user (meaning not having to updated folder security settings for all existing user. One last piece of information for cost purposes we are using the Home version of Window 10. Upgrading to Windows 10 Pro is not in the budget. Also, we do not have an IT department so hopefully the solution is something a teacher can implement.

I appreciate any help or assistance. Lastly, I'd like to avoid registry changes but if that is the only simple way then so be it.

Jerry

:)

 

how hard to set up plublic folder

how much time does it take to create a public folder. having multi users is there an icon on every users desktop thay they ck to put in , see , use, thanks.

 

Soul Reaver 2 video game wont run on Windows 10, did run on Windows 8.1 prior to upgrade.

I have a Multi-user 8.1 machine that I have had a similar issue with. Game client originally did not require additional login or permission but after an update to 8.1 it did for one of the user accounts.

I did resolve by reviewing permissions and security settings of the folder where the game client and files are stored and managed to get user to run without additional admin user login.

Win10 has probably changed security for certain folders as Microsoft tries to help combat security issues....

 

I dont see the point in this why cant they just save files to their profile path which only they have rights too? Hidding the folders and drive would be a problem as if they show hiden files they would see them. If you create folders for each user that would be simpliest then before you do any Deny set allow set admins to allow set user to allow set everyone to deny. User can see the folder but cant access. If you have a lot to do you could write a simple script to create folder and permissions so it would take seconds

 

Samuria,

Thanks for the suggests. A couple of comments or questions.
1)There is no group called Everyone on my security tab
2)is there a precedence order on the list of Users/groups on the Security tab. For example is it top to bottom or bottom up? Do individual users have precedence to groups
3) is there a defined hierarchy to the list of. For example is Users a subset of Authenticated Users,....

Again, thanks for taking your time to respond

 

There must be an everyone its been that way for years if it doesnt show on the folder goto advanced and add everyone. Any group or user can have permission set individually system is the highest which is windows itself

 

Hi there. Not sure if it can be done in Home edition, but I believe everything can be accomplished via Group Policy, but it's way beyond my knowledge to instruct how.

Open Local Group Policy Editor in Windows 10 Security System Tutorials

 

I've tried DENYing privledges to the group Everyone but all that did was make it so no user could see any folder. I had the same result when DENYing to the group Users.

I don't understand or don't know if there is any rules or precedence or hierarchy where I can DENY Everyone but then ALLOW for a specified User. Seem that DENY outranks ALLOW and that is a problem.

I still don't see a way to allow a User to only access their files and not be able to access or see other user's file. I have a hard time believing this can't be done. Hope someone out there can point me in the right direction,

Thanks

 

I refer you to post two you must set ALLOW before you set deny do that and it works be sure to allow admin and user

 

Hello Jerry, *Smile

You might see if moving the "C:\Users" folder to the other drive as in the tutorial below may be able to work for what you're wanting.

*Arrow Move Users Folder Location in Windows 10 Installation Upgrade Tutorials

 

Samuria,

This did not work. Here is what I did.
0) Created a folder on X: with the name Jerry
On the security tab, I did the following

1) the Administers group was already set to Allow (gray check marks)
2) my personal account is already set to Allow (black check marks)
3) I set Users group to Allow. It was already Allow but not for certain things
4) Added the group Everyone and set it to Deny

What happened was I was not able to access my own folder (Jerry) on the X: drive.

 

Going back to simple way why can't they just save in their own profile that doesn't need setting up? Or what about post 8 brinks idea

 

Samuria,

I certainly can relocate each user's special folders, ie. Documents, Pictures, etc. I would like to teach, include in my lesson plan, how to deny every user access to a folder that is outside the special folder group. I was hoping it was possible to do this.

I know my knowledge on the subject is limited but I am trying to acquire the necessary skill. I also don't know if Security has some sort of hierarchy or precedence rules. I do know the Deny is stronger than Allow, but are there any other set rules, i.e. that Everyone is stronger than Users and how do they aggregate. For example, if User is set to Read and Everyone is set to Write, is the effective permission Read/Write. Question, is it possible to remove an individual user from a group. For example, can I remove myself from the Everyone and User groups? What are the side-effects.

Unfortunately, all these questions are outside of Microsoft support for Window 10 Home and Pro.

Thanks,

 

OPen a cmd prompt them type

icacls x:\jerry

post results so we can see what you have done it may be inheriting from folders above