Windows 10: Is a standard user account necessary for tight security and home user?

Page 5 of 7 FirstFirst ... 34567 LastLast

  1. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       26 Sep 2016 #41

    fdegrove said: View Post
    Hi,



    Sure.

    Download and install subinacl.msi from this site:

    https://www.microsoft.com/en-us/down....aspx?id=23510

    Then copy and paste the following into notepad and save as acl.bat :




    Run the batch file as admin and the accounts should be reset to their defaults.

    Cheers,
    Hi fdegrove,

    Unfortunately there hasn't been any change, does the computer need to be rebooted afterwards? Have you got any other ideas?
      My ComputerSystem Spec

  2.    26 Sep 2016 #42

    Hi,

    Unfortunately there hasn't been any change, does the computer need to be rebooted afterwards? Have you got any other ideas?
    No, it shouldn't.
    Unless I've overlooked something, no I don't have any other ideas at this point. Sorry.

    Cheers,
      My ComputerSystem Spec


  3. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       26 Sep 2016 #43

    fdegrove said: View Post
    Hi,



    No, it shouldn't.
    Unless I've overlooked something, no I don't have any other ideas at this point. Sorry.

    Cheers,
    No worries, I might set up a new thread to see if anyone else can help.
      My ComputerSystem Spec


  4. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       27 Sep 2016 #44

    I wonder if my issue could be that the users folder is "shared"

    I've found some information and uploaded some screenshots. I haven't applied the changes yet as I'll wait for another opinion even though it seems like a likely possibility...

    https://scottiestech.info/2009/09/25/windows-7-file-sharing-fixing-the-entire-user-directory-shared-problem/

    Click image for larger version. 

Name:	User_folder_permissions.png 
Views:	1 
Size:	114.5 KB 
ID:	103465Click image for larger version. 

Name:	User_folder_permissions_2.png 
Views:	1 
Size:	91.2 KB 
ID:	103466
    Last edited by Kol12; 27 Sep 2016 at 19:59.
      My ComputerSystem Spec


  5. Posts : 11,233
    W10Prox64
       27 Sep 2016 #45

    That sounds like the problem. Normally, you wouldn't share the entire users folder.
      My ComputerSystem Spec


  6. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       27 Sep 2016 #46

    simrick said: View Post
    That sounds like the problem. Normally, you wouldn't share the entire users folder.
    I have to wonder if when I created a homegroup for testing purposes that it set the permissions as I at no time recall setting this manually... I removed the homegroup at the same time.

    Now it's a matter of working out how to set this all back to normal as there are a multitude of places to edit the permissions within the user folder properties...
      My ComputerSystem Spec


  7. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       27 Sep 2016 #47

    fdegrove said: View Post
    Hi,



    Sure.

    Download and install subinacl.msi from this site:

    https://www.microsoft.com/en-us/down....aspx?id=23510

    Then copy and paste the following into notepad and save as acl.bat :




    Run the batch file as admin and the accounts should be reset to their defaults.

    Cheers,
    Was I by any chance meant to install the subinacl tool to C:\Windows\System32?

    There are similar instructions here:
    http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-reset-all-user-permissions-to-default/9da312d2-c99b-4283-a275-e74d93dcc366?auth=1
      My ComputerSystem Spec


  8. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       28 Sep 2016 #48

    Steve C said: View Post
    I would give each user their own standard account for extra security and keep an admin account for system maintenance. I also have a reserve admin account on my PC in case of problems with the main admin account!

    I've also set my admin account to be a local rather than Microsoft account.

    You can run many admin tasks from a standard account but you will get an UAC prompt for the admin password.
    What sort of problems might you encounter with your admin account? Is the idea of having the backup admin account that if your primary one broke it might lock you out of your computer?
      My ComputerSystem Spec

  9.    28 Sep 2016 #49

    Hi,

    Was I by any chance meant to install the subinacl tool to C:\Windows\System32?
    No. If you change the installation destination folder then the batch file needs to be edited accordingly.

    Have you removed the share from the "users" folder ?

    Cheers,
      My ComputerSystem Spec


  10. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       28 Sep 2016 #50

    fdegrove said: View Post
    Hi,



    No. If you change the installation destination folder then the batch file needs to be edited accordingly.

    Have you removed the share from the "users" folder ?

    Cheers,
    Ok.

    No because I'm unsure about from where exactly to do it. You've got options to make permission changes from the "Sharing" or the "security" tabs. Not knowing why my permissions have ended up this way in the first place I'm quite confused and worried that if change something incorrectly that it will either break something or defeat the purpose of creating a standard user account for another layer of security in the first place.

    Interestingly our laptop has the same issue so I can't help but think that this was caused by the creation of a Homegroup? I've also noticed that the laptop is using a Public network so how it could connect to a Homegroup in the first place I didn't think that was possible?

    It's possible these "shared" permissions are affecting other folders as well. Should the standard user be able to access the Windows folder?

    Click image for larger version. 

Name:	User_folder_permissions_6.png 
Views:	1 
Size:	53.2 KB 
ID:	103495
      My ComputerSystem Spec


 
Page 5 of 7 FirstFirst ... 34567 LastLast

Related Threads
should I use a standard user account? in User Accounts and Family Safety
Is it still recommended to do your daily tasks in a non-administrator user account, or is that obsolete advice in windows 8-10?
Guys I have done this in the past but cannot recall how and don't want to botch. I had hoped Windows 10 corrected the "rename user account" function but nope. I renamed a User Account due to conflict on the LAN and sure enough, now I have two...
standard user account and drive formatting in User Accounts and Family Safety
In Windows 10 Pro is there a way to prevent a user without administrator privileges using a standard account from being able to format a usb drive? "Perform volume maintenance tasks" is set for Administrators (Group Policy), which must be the...
Solved How to disable a user account in W10 Home? in User Accounts and Family Safety
I know I can't access the local users and groups policy in this version, but I can't figure on how to -temporarily- disable my kid's user account so that it cannot be logged in. Thanks!
Yesterday I've upgraded to Windows 10 Home 64 bit, from my Windows 7 64 bit Home Premium. Then I clean installed it, after the OS was activated. I used a local account and I have never switched to any of my Microsoft's e-mail accounts. The...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 17:15.
Find Us