To experiment with security settings of folders, on my Windows 7 Ultimate desktop (Standalone) I have two users created on it, both are administrators. User1 & User2. I want to make sure that a folder say C:\Temp created by User2 is only accessible to User2. Even if User1 logs in he can’t access it.
I have partly succeeded as follows
Log in as User2
Create a folder named say C:\Temp
Access ownership and set owner as User2 and also remove all inheritance
Now assign User2 full control and deny User1 all control
With this when User1 logs in he cannot access the folder.
The cache is that User1 can still go to ownership, change the ownership to User1 and then he can access the folder. What am I missing here? How can I completely prevent User2 from ever accessing C:\Temp or any of its permissions settings despite both are administrators?
Here are relevant screenshots of the folder permissions set.