Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have Windows 7 Ultimate edition. There are three Windows accounts of which only mine is Administrator and the other two are Standard. Any other new account will also be Standard only.

I have lots of files and folders in D: that I want to protect from modification by any one of the Standard accounts.

I want Standard user accounts to be able to only view the files but not delete, edit or move them. For example, they can view pictures, play movies, open documents BUT should not be able to save them, rename, edit, delete or move them.

How can I set up Windows to do this?

share|improve this question
add comment

4 Answers

up vote 3 down vote accepted

If the Drive is NTFS, you may right click on the drive and go properties then to permissions, from there you may uncheck permissions for all users except administrators that you do not desire.

share|improve this answer
add comment

Bring up the properties for the files/folders, go to the Security tab, and make sure that the Users group doesn't have "Modify" rights on them.

Administrators should have Full Control by default, so you'll be OK there. However, since you'll be running with a stripped token most of the time (unless you've disabled UAC), you might want to explicitly give your account Modify privileges or you'll constantly be going through elevation dialogs every time you want to modify those files.

BTW, if your users can read the files, they can copy them somewhere else where they have Modify rights. There's nothing you can do to stop that. But Read & Execute will keep them from doing much else.

share|improve this answer
    
They can copy files to their documents folder and do what they want. I want the originals unaltered. So thats okay. Thanks :) –  user57813 May 20 '11 at 19:11
add comment

You can set the Security options on the D: drive through the following steps:

  • Open Computer from the Start Menu
  • Right click the D: drive
  • Select Properties
  • Click on the Security tab
    Security Tab Selected
  • Select the Standard Users group and click Edit
  • From there you can check and uncheck the options that you want. Edit Window
share|improve this answer
add comment

It is a fairly straight forward task.

Here's a post about it: http://www.dkszone.net/how-to-change-filefolder-permissions-in

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.