The way I would do it in your situation would be create your own domain network using your 10 existing computers & a standalone server computer. The server computer wouldn't have to be that powerful; just a fast local network connection needed.
This would allow you to create user-accounts that store all their files on their assigned areas on the server, and that non-Administrators would not be able to view the files of each account.
Having your own domain network would also allow you to:
- Install programs automatically on all computers at once
- Allow employees to use any computer & still get their user account- useful if one of the computers broke
- Central control of computer settings
Having said that, you can deny other users access to per-user folders on the shared network drive.
On each PC:
- Right-Click the user's folder and click
Navigate to the
Security tab, & click
Add. Notice that all users have the permission of
This folder, subfolders and files. We don't want that.
Select a Principal, and type
Untick all checkboxes, and click
Repeat steps 4 & 5 but in the
Select a Principal dialog type the user's user-name, but ensure the user has full permissions
Test by attempting to access the folder via another PC/user-account. Windows should deny you permissions.
Note: if any employees are administrators on their machine, they are able to undo the permissions that were set. Employees should be Standard users.
If you set the permissions correctly, you should get something like this:
As you can see, setting these permissions on every computer for every user can be time consuming, hence a domain with Windows Server would be beneficial in this case.