Read only access to some files from some accounts

[krtxmrtz]

My pc has various user accounts -mine is the only one to have administrative privileges- and I want to grant the other users read-only access to some folders/files so they can't modifiy or delete them. Is this possible in Windows 7?

[dclamp]

Right click > Properties > Security Tab

From there you can manage permissions to your file by the user.

[krtxmrtz]

Right click > Properties > Security Tab

From there you can manage permissions to your file by the user.

Thanks.

I see there's a list including:

Myself
Someone Else 1
Someone Else 2
...

But then I also see:

EVERYONE
CREATOR OWNER
SYSTEM
BATCH
Administrators
INTERACTIVE
SERVICE
WPM/NetworkSvc

Is is only the first users above that I have to deal with?

[dclamp]

You should give no access to "everyone" and "administrators" and full access to "creator owner" even though that is you.

[sapator]

It may be possible to do this(haven't tested):
Goto MyComputer--(right click)manage -- Local Users and groups --Groups. There create a new group and add all the users you want to have restricted access to folders.
After that, in every folder you want users to have restricted access you can add this group and it's permissions, without having to add every single users. Again, haven't tested.

[krtxmrtz]

You should give no access to "everyone" and "administrators" and full access to "creator owner" even though that is you.

After doing it like this I myself don't have access the folder.

[krtxmrtz]

It may be possible to do this(haven't tested):
Goto MyComputer--(right click)manage -- Local Users and groups --Groups. There create a new group and add all the users you want to have restricted access to folders.
After that, in every folder you want users to have restricted access you can add this group and it's permissions, without having to add every single users. Again, haven't tested.

Thanks for the suggestion but it didn't work: it appears that the individual users' privileges take precedence over those of the group.

[stanav]

1. You need to make the user account that you want to limit access to files/folder a limited (non-admin) account. There is no point of setting restriction on someone who has the power to change it back to whatever he/she wants.
2. Now on the folder that you want the restriction to apply, right click and select Properties. On the Security tab, make sure that the users and everyone group have only read access. You can add that specific user and set to have read only access too.

[krtxmrtz]

1. You need to make the user account that you want to limit access to files/folder a limited (non-admin) account. There is no point of setting restriction on someone who has the power to change it back to whatever he/she wants.
2. Now on the folder that you want the restriction to apply, right click and select Properties. On the Security tab, make sure that the users and everyone group have only read access. You can add that specific user and set to have read only access too.

I'm not sure I've got it right: if I want to prevent user 'Rest of the World' from deleting files from a folder I must set the folder's properties to read only access for Rest of the World AND FOR the Everyone and Users groups?

In a previous attempt I tried to give read only access to EVERYONE and then I myself couldn't even read the files!

Also I set these permissions for Rest of the World only:



but Rest of the World could still delete files. And to my surprise, it was only when Rest of the World tried to recover those files from the recycle bin that he was prompted for the administrator's password.

[Nightwalker83]

I would think it would be "Read & execute" that needed to be checked rather than "Write" unless you want "Rest of the World" to have "Write" access?

[krtxmrtz]

I would think it would be "Read & execute" that needed to be checked rather than "Write" unless you want "Rest of the World" to have "Write" access?

I thought I was denying write access to RotW by checking 'deny'.

If I check Read/Execute instead then all the checkboxes below get automatically ticked.

[Nightwalker83]

I thought I was denying write access to RotW by checking 'deny'.

Sorry, my mistake!

If I check Read/Execute instead then all the checkboxes below get automatically ticked.

Oh? It has been ages since I changed those settings so I do not remember what happens.

[krtxmrtz]

Sorry, my mistake!



Oh? It has been ages since I changed those settings so I do not remember what happens.

I hope someone can give me the exact recipe. It's a bit annoying making the changes, logging out and back in with the other account for testing and then back to the main account to reset the settings that haven't worked.

[dee-u]

This seem to do it for me (disable delete, etc) but not fully tested.