Restrict A Drive

I have Win7. 64 Bit and 2. USB Hard Drives.

I have Videos Music Notes Work Documents and Photos on the USB Drives.

So I want my Limited Account to be Restricted.

So I know I Right Click the USB Drive then Click Security.
Then I have to remove USERS.

And I do this by Clicking on Edit then Click USERS then Remove.

I get all of this but one thing?
I do not See just USERS I See something that says AUTHENTICATED USERS.

And the other one says SYSTEM.

And the other one says my Admin Account.
So am I Right I Remove the one that says AUTHENTICATED USERS?

 

Well the only thing that says User is
AUTHENTICATED USERS.

And I Removed it and as you may know if I go to open my USB Drive I am Restricted.

Can anybody help?

 

I keep Adding back the AUTHENTICATED USERS and I still can not get Back into my USB Drives.
Can anybody help?

 

Ok I did it again and went into the Permisions and got it Right this Time so now I have Full Control of the USB Drive.

Now if I want my Limited Account to have to Control of my USB Drive what do I do?

 

I want to tell you what I found out.

If I Right Click my USB Drive and I go into Security Tab.

I See 3. Profiles.

System.
Authenticated Users.
Admin with my Name.

If I Click each Profile they all have Full Control.

And Yes I know if I want to Restrict a User I Click the Name Above and Click Edit.

But witch Profile do I go under?

As you know whenever I try any of these I am the one that is Locked Out of my USB Drive.

I do not want my Limited Account to get into my USB Drive.

Thanks for the Time.

 

Try this:

https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accounts

Use your browser's find and search for "authenticate". There is mention there of this:

• Enforce local account restrictions for remote access.

This at least gives me some hope that what you are seeking can be done, although I believe this means Remote Desktop, Remote Help, etc. Well, below the bullet-points it says that all the options mentioned in the bullet-points are discussed below. Maybe at least this article will give you some more specific questions you can ask of MS. Could be what you seek is done through Group Policy? idk, as I don't have experience with GP. BTW, MS Answers is a good place to go when you really need something specific:

https://answers.microsoft.com/en-us

Just found this:
a
https://www.howtogeek.com/howto/8035/how-to-restrict-access-to-drive-in-my-computer-on-windows/

Maybe this will be of some help, although Group Policy is not available on Home versions of Windows...

 

I know what is going on.

If I Right Click my USB Drive and Click Properties.
Then Click Security Tab the Profile USERS is not in the List.

But if I Right Click my C Drive then Click Properties.
Then Click Security Tab the Profile USERS is in the List.

So I can Block my Limited Account from my C Drive but not my USB Drive.

But here is something I think is Strange?
If I Right Click my USB Drive then Click Share Tab a Menu Dropsdown that says Advanced Sharing.
So I Click This and then on the next Screen I Click the Share Tab at the Top.

On this Screen it says NOT SHARED.

But if I go Log On to my Limited Account and go into Explorer and I can Open my USB Drive and Open the Files.

Does anybody know what this is and why?

 

• In the security tab, click on Edit then Add.
• In 'Enter the object names to select' type in Users then press the Check Names button.
• You should now see 'YourPCName/Users' so press OK.
• Next, edit the permissions for Users then Apply and OK.

 

Ok I did this

I Type in Usere in Object Name then Click Check Name.

Then I Click Ok and it brings up the Screen to set Permitions for it.

So I put a Check in Deney All and a Check goes in Everything and this is what I want.
Then I Click Apply and this screen says

An Error Occurred while Appling Security information access Denied.

I did Click Continue but the Text Massage just goes off then Pops back on Screen.

So I Click Cancel and it says

Stopping the propagation of permission settings leads to an inconsistent state in witch some objects have the settings but others don"t.

Then it Opens Explorer so I close this and just for the Hell of it I Log Onto my Limed Account and open Explorer and I can not get into my USB Drive.

So I start thinking it worked.

So I Log back into my ADMIN Account and open Explorer and try to go into my USB Drive and it wont let me.

So I go back into the Security Tab and Check the Settings for
System
ADMIN
Authenticated Users.

These all say Allow for Everything.

But the New Users Account I just Added says Deny for Everything.

Can you help?

 

If you successfully set deny all access for the users group, then you'll lock yourself out of the drive and have to modify permissions to regain access. The best approach would be to put a check mark in allow read and leave all deny permissions unchecked.

 

Do you mind if you send me a Private Massage with a Phone Number I can Call you at?

I think because of my Bad Eyes it is Hard for me to Tell you in Text what is going on.

Thanks.

 

I still have Problems but I think I can help you help me?

After I Right Click my USB Drive and Click Security Tab I do not See the Users Profile in the List.

Like I say I See Authanticated Users and System and ADMIN.

So I Click Ad then Type Users and Click Check Name.
Then I Click Apply and it Ads the Users Profile to the List.

So I then Click on Users then Edit.
I then take the Check out of Read and also Write.
Because I do not want the Users Profile to have any Rights to this Drive.

Then I Click Apply and it tells me Access Denied and it wont let me do this why?

 

Any deny permissions applied to the Users group will also propagate to Administrator groups. In essence, by denying all you will lock yourself out of the folder/drive, hence the reason that the operating system throws Access Denied or issues a warning.
The best you can achieve with the Users group is to only allow Read access.

If you have Windows 7 Pro or Ultimate, then use group policy to restrict access as outlined in the link in post #6.

 

Thank you for getting back to me.

So let me See if I have this Right?

Even if I Ad the Users Profile like I did to the Profile List anything I Apply to it will be Transfered to every Account on the System.

Then why Creat Limited Account and other Account if they all can get into the ADMIN Account and Drives on the System?