Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using Windows Vista. What is the correct and best way to prevent access to an entire drive (not the C windows drive) for a particular user? Probably I prefer an NTFS solution rather than hiding drive letters.

When I look on the Security tab of the drive's properties I see:

Group or usernames:

Authenticated Users
Administrators (MyComputer\Administrators)
Users (MyComputer\Users)

I'm not sure if I should be adding a deny permission or removing an existing permission and I don't understand how the Authenticated Users combines with Users (or with the specific user if I add them)

share|improve this question
up vote 2 down vote accepted

"Deny" permissions overrule "Allow". When Windows encounters a Deny that matches the current user, it stops looking and denies the access. It therefore doesn't matter how many groups would allow your particular user, once you've denied him, he's out.

share|improve this answer
So you're saying add that user and then mark them as deny read? – User Sep 20 '11 at 20:30
I figured I'd give this a shot. It looks like windows is going through every single file on that drive and adjusting the permissions. Is that right? – User Sep 20 '11 at 20:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.