ADMINISTRATOR
- Učlanjen(a)
- 11.10.2009
- Poruka
- 66.917
You have a computer which share with others (friends, children, etc.). You’re using Windows XP and you need to customize permission of files or folders on certain users. For example, you want to restrict access your child not to access some folders which have your sensitive information. Or you may want to restrict access on disk drive D: to a certain user.On Windows XP, you can customize either to allow or deny permissions on certain users or groups for a specific files or folders easily. But you need an administrative privilege to perform this task. So in the following section, I’ll show how to customize permissions of files or folders for certain users.
Customize permissions requires administrative privilege so if someone besides you has an account which has administrative privilege, he/she can also customize permissions of files or folders, too.
Note: You shouldn’t customize permissions on the system files or folders for example, Windows Folder (C:\WINDOWS), Program Files (C:\Program Files), Disk Drive C: (Windows System Drive), etc. If you remove permissions that are used by Windows system, the process or service that depends on it may error.
I wrote articles about reset administrator’s password years ago. So you should be aware that someone can gain administrative privilege and override your configuration. To prevent the situation, you have to restrict CD-Rom drive and USB drive to only trusted users because one of these devices is required to reset password.
STEP-BY-STEP TO RESTRICT ACCESS TO FILES OR FOLDER
In the example below, I’m going to customize permissions to allow only “linglom” (a regular user) to access the folder C:\Restricted. And I have created another account which also a regular user“ling” who hasn’t the privilege to the certain folder to test access the restricted folder.
You should now get concept about permissions configuration. You can apply to customize permissions (Read, Write and Execute) to certain users on files/folders/disk drives. But keep in mind that if someone besides you has an account which has administrative privilege, he/she can also customize permissions of files or folders, too.
Customize permissions requires administrative privilege so if someone besides you has an account which has administrative privilege, he/she can also customize permissions of files or folders, too.
Note: You shouldn’t customize permissions on the system files or folders for example, Windows Folder (C:\WINDOWS), Program Files (C:\Program Files), Disk Drive C: (Windows System Drive), etc. If you remove permissions that are used by Windows system, the process or service that depends on it may error.
I wrote articles about reset administrator’s password years ago. So you should be aware that someone can gain administrative privilege and override your configuration. To prevent the situation, you have to restrict CD-Rom drive and USB drive to only trusted users because one of these devices is required to reset password.
STEP-BY-STEP TO RESTRICT ACCESS TO FILES OR FOLDER
In the example below, I’m going to customize permissions to allow only “linglom” (a regular user) to access the folder C:\Restricted. And I have created another account which also a regular user“ling” who hasn’t the privilege to the certain folder to test access the restricted folder.
- Login to Windows XP with an account that has an administrative privilege.
- If your PC isn’t on a domain, you have to disable simple file sharing first. See
[Solved] Missing Security Tab on Windows XP for detail steps. - Select folder that you want to customize the permission. In this example, it’s C:\Restricted.
- Right-click on the folder and select Properties.
- On Properties window, select Security tab.
- On Security tab, you can customize permissions on a certain user or group.
- To determine if a name is a user or group, observe at icon in front of the name. If it’s a person, it will be a user. Otherwise, it will be a group.
- By default, these permissions are inherit from root (C:\) which I don’t want it so I’ll remove the inheritance. Click Advanced.
- Uncheck “Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here“.
- The pop-up message appears, you have 2 options: Copy and Remove. In this example, I selectCopy for ease of customization. If you select Remove, all permissions wil be removed so you have to configure it from scratch.
- Now all permissions are customizable. You notice values on Inherited From columns are<not inherited>. Click OK.
- Back to Security tab, remove Users (BKKTEST01\Users) by select the name and clickRemove. This is the Users group which permissions are configured to allow access on this folder.
- Next, add a local user “linglom”. Click Add.
- On Enter the object names to select section, type “linglom” and click Check Names. It finds the account that match the name. Click OK.
- Now I have an an user account “linglom” with default permissions (Read & Execute, List Folder Contents and Read) to this folder. Click OK to close the Properties window.
- Test the configuration by login as “ling”, the account which hasn’t permission to access the permission customized folder.
- Open My Computer -> C:\ -> Restricted. You’ll see the error message:
C:\Restricted is not accessible.
Access is denied.
- Then, try again with the user account “linglom”.
- You’ll see that you can open the folder and read files but you can’t create a new file or modify existing files on the permission customized folder. This is because that you didn’t give Writepermission to the user account on step 15.
You should now get concept about permissions configuration. You can apply to customize permissions (Read, Write and Execute) to certain users on files/folders/disk drives. But keep in mind that if someone besides you has an account which has administrative privilege, he/she can also customize permissions of files or folders, too.
Poslednja izmena: