Windows 10: Win 10 permissions and take ownership

I have a user who can take ownership of a folder when i have expressly denied the user and administrator/s all permissions including take ownership


Users on a single Win 10 PC and as I am not just the only one who uses the PC I want to lock a folder down to stop anyone else accessing the folder who may use the PC.


Below are examples account names but demonstrate the problem

*** Email address is removed for privacy *** me

*** Email address is removed for privacy *** another user on the PC

all other accounts are disabled


Using the advanced folder permissions I have disabled inheritance on the folder and denied all permissions for administrator account which is disabled and the other user on the PC *** Email address is removed for privacy *** both users *** Email address is removed for privacy *** and *** Email address is removed for privacy *** have microsoft accounts and are linked for login on the PC.


I am trying to ensure that the user account on the PC *** Email address is removed for privacy *** or any other new account or administrator who uses the PC, cannot access my personal folder or get access by taking ownership.


Strangely even though the "effective access" for the user *** Email address is removed for privacy *** and administrator states the user/s are denied all permissions have tried both not allowing and denying, the user *** Email address is removed for privacy *** can still "take ownership". I can stop the administrator taking access but I cannot stop the other user *** Email address is removed for privacy *** who is an administrator. taking access !


The only factor that may be relevant is that the user *** Email address is removed for privacy *** was the first user created when i installed windows and the fact that the account names are similar. I dont think they are in the same family they were once but this wont make a difference ?

Please advise as this is incredibly frustrating

:)

 

Ownership Issues

that will not hurt taking ownership, but I would also then look in the list of users on the ownership page and make sure your user account name is there with full permissions. Probably not.

even though you take ownership of an item, you may not be in the list of users with permissions.

first select disable inheritance, then select "ADD" in the list of users, and add your user account the same way you took ownership and select full permissions.

Then administrators may only have select permissions in the list. so after you disable inheritance, delete admins user. then select add again and select admins in the list and select full permissions

restart pc

 

Cannot take ownership of external HDD(permissions complications)

Hi,

When you take\change Ownership, the is a box to check right under where the Owner is listed to apply to folders and subfolders...

You may have missed that step... I will include the steps I use for this...

Use at your own risk...

Change Ownership and add OwnerName as a USER

Select Security Tab and then ADVANCED at the bottom.

Here you can edit the permissions for existing users and\or add another..

Click "CHANGE" next to Owner at the top of the window...

Select...

1) Advanced

2) Find Now

3) Select User from list...Your user name, or any you want to add.

4) check the box "Replace Owner On Subcontainers and Objects"

5) Hit "Apply"

　

Close out of all of the open windows and start over with the Advanced button...

1) select "ADD" near the bottom

2) select "Select A Principal" at the top...

3) Advanced

4) Find Now

5) Select User from list...Your user name, or any you want to add.

6) Give the new user\owner full permissions...

7) Do Not check the box "Include Inheritable Permissions From This Object's Parent""

8) Select "Apply"...

 

Permission issue

Presumably because TrustedInstaller is the owner (hence you need its permission), suggesting that img3.jpg was installed by Windows at some time.

Presumably that also means it can be uninstalled. How did you get it in the first place? Where is it located?

If you really want to delete it yourself, then taking ownership would seem a logical first step.