I apologize in advance if this isn't the correct site to ask these type of questions.

I sometimes share my laptop with my small cousin. That being the case I created a guest user in Windows 10 for his use, where many actions require an administrator password. However I noticed that the guest user can still access my secondary drive D: and delete files in that drive without any permission. Is there a way for me to restrict that user's file access to only those in its domain? For example only in that user's default "My Documents" or "Downloads" folder.

To create the guest user, I followed a guide from HowToGeek, and typed the following commands in command prompt from administrator:

C:\WINDOWS\system32> net user Visitor /add /active:yes

C:\WINDOWS\system32> net user Visitor *

C:\WINDOWS\system32> net localgroup users Visitor /delete

C:\WINDOWS\system32> net localgroup guests Visitor /add


First, you will have to create a new user account for him in Windows 10 under Settings/ Accounts/Family and Other People/Add a Family Member. Follow the prompts and save the new profile. If you don't want to use this method, there are a few other ways of creating it.

Create and Manage User Accounts in Windows 10

Once you have created the new account, you can edit the security properties of any folder or drive for this or any other existing account. Open Windows Explorer, navigate to the drive you want (in this example, I'll use C:) and right-click on it. Then click Properties.

enter image description here

Once you have accessed the Properties menu, click on Security.

enter image description here

Then click on Edit and select the group/user whose access you would like to restrict.

enter image description here

Choose Deny for all options, unless you want something more specific than just denying access across the board. For example, you can allow for Read or Read and Execute if there are any .exe files you want to let him run, but you'll definitely want to avoid checking Full Control or Modify, depending on what you are trying to prevent. Of course, you can get even more specific under Advanced.

enter image description here

After you have checked the appropriate boxes, click Apply.

Using this method, you can customize the permissions of any folder or drive for each specific user on your system.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.