Windows 10: Want to restrict standard user account to share any folder and sub-files, but admin account...

I Want to Restrict the Standard User Account from Sharing Any folder and files but the Admin Account Can Share that folder and files.Till now I have used :- I'm Using Windows 11 pro edition Create a New User Group:In the Local Users and Groups window, right-click on "Groups" and select "New Group."Name the group e.g., "RestrictedUsers" and click "Create."Assign Permissions to the Folder:Navigate to the folder you want to restrict in File Explorer.Right-click on the folder, select "Properties," and go to the "Security" tab.Remove Sharing Permissions for Standard Users:In the Security tab

:)

 

folder creation and sharing, i want to create an admin user that have only permission to modify folders and file but not have domain admin access.

Hi Mindspaceoutsourcing,

Welcome to Microsoft Community.

I'm Hahn and I'm here to help you with your concern.

To create an admin user with the permission to modify folders and files but not have domain admin access, you can follow these steps:

Step 1: Create a new user account

1. Log in to the computer or server as an administrator.
   
2. Open the "Control Panel" and navigate to "User Accounts".
   
3. Click on "Manage another account" and then "Add a new user account".
   
4. Enter a username and password for the new user account and click "Create Account".
   

Step 2: Add the user account to the local Administrators group

1. Open the "Control Panel" and navigate to "Administrative Tools".
   
2. Click on "Computer Management".
   
3. In the left pane, click on "Local Users and Groups".
   
4. Click on "Groups" and then double-click on "Administrators".
   
5. Click on "Add" and enter the username of the new user account.
   
6. Click "OK" to add the user account to the Administrators group.
   

Step 3: Create a shared folder and grant the new user account full access

1. Create a folder on the computer or server that you want to share.
   
2. Right-click on the folder and select "Properties".
   
3. Click on the "Sharing" tab and then click "Advanced Sharing".
   
4. Check the box next to "Share this folder".
   
5. Click on the "Permissions" button.
   
6. Click "Add" and enter the username of the new user account.
   
7. Select the new user account from the list and click "OK".
   
8. Grant the new user account full control permissions by checking the box next to "Full Control".
   
9. Click "OK" to save the changes.
   

Step 4: Set file and folder permissions

1. Right-click on the folder you want to modify and select "Properties".
   
2. Click on the "Security" tab and then click "Edit".
   
3. Click "Add" and enter the username of the new user account.
   
4. Select the new user account from the list and click "OK".
   
5. Grant the new user account the necessary permissions by checking the appropriate boxes (e.g., "Modify", "Write", "Read & Execute").
   
6. Click "OK" to save the changes.
   

Step 5: Remove the new user account from any other groups with domain admin access

1. Open the "Control Panel" and navigate to "Administrative Tools".
   
2. Click on "Computer Management".
   
3. In the left pane, click on "Local Users and Groups".
   
4. Click on "Users" and then double-click on the new user account.
   
5. Click on the "Member Of" tab.
   
6. Remove the new user account from any groups that give it domain admin access.
   
7. Click "OK" to save the changes.
   

By following these steps, you should now have an admin user with the necessary permissions to modify folders and files but without domain admin access.

I hope this helps. If there is anything not clear, please do not hesitate to let me know.



Your Sincerely

| Microsoft Community Support Specialist

 

Admin accounts

Yes.

An admin, if they try to browse the user folder of any other user (standard or admin) will be told they don't have access, but will be offered permanent access if they wish by clicking Continue. You won't accidentally stumble across her files, but you could look for them if you were determined. Can she trust you (or can you trust yourself) not to click Continue?

Even signed in as an admin, most of the time you are running processes or apps as a standard user anyway. Only when you try to do something that requires admin rights will you be asked (as in the folder example above) if you want to use your admin privileges. The 'harm' would be if you click 'Yes' on a UAC prompt before taking the time to think about what it is that you'd be allowing to run.

 

Making a restricted user account

Hi, just created a child account for myself (!) - from there you can see files and folders on C: but can only write to your own library folders- there's no write access to (e.g.) C: or C:\Program Files - not without permission via admin login.