How to Create MUlti-user Folder Security for a School Setting

I asked in a previous thread a related but it never lead to a useful solution, so I will try again.

I have . a computer(s) that I want to use in a multi-user situation where I will be adding and removing uses based on the school semester. One these computers I've installed a separate drive (X:\) for user data. What I would like to do is create an environment where each user sees X: as their own personal drive. Meaning that all other users file/folder are hidden and unavailable. As alternate solution, it would be acceptable to create a folder for each user and that any user cannot see the contents of other user folder. Either solution would work. From a maintenance point of view, when a user is added I'd like to update security for that user and only that user (meaning not having to updated folder security settings for all existing user. One last piece of information for cost purposes we are using the Home version of Window 10. Upgrading to Windows 10 Pro is not in the budget. Also, we do not have an IT department so hopefully the solution is something a teacher can implement.

I appreciate any help or assistance. Lastly, I'd like to avoid registry changes but if that is the only simple way then so be it.

Jerry

I dont see the point in this why cant they just save files to their profile path which only they have rights too? Hidding the folders and drive would be a problem as if they show hiden files they would see them. If you create folders for each user that would be simpliest then before you do any Deny set allow set admins to allow set user to allow set everyone to deny. User can see the folder but cant access. If you have a lot to do you could write a simple script to create folder and permissions so it would take seconds

Samuria,

Thanks for the suggests. A couple of comments or questions.
1)There is no group called Everyone on my security tab
2)is there a precedence order on the list of Users/groups on the Security tab. For example is it top to bottom or bottom up? Do individual users have precedence to groups
3) is there a defined hierarchy to the list of. For example is Users a subset of Authenticated Users,....

Again, thanks for taking your time to respond

There must be an everyone its been that way for years if it doesnt show on the folder goto advanced and add everyone. Any group or user can have permission set individually system is the highest which is windows itself

Jerrythesurfer said:

I asked in a previous thread a related but it never lead to a useful solution, so I will try again.

I have . a computer(s) that I want to use in a multi-user situation where I will be adding and removing uses based on the school semester. One these computers I've installed a separate drive (X:\) for user data. What I would like to do is create an environment where each user sees X: as their own personal drive. Meaning that all other users file/folder are hidden and unavailable. As alternate solution, it would be acceptable to create a folder for each user and that any user cannot see the contents of other user folder. Either solution would work. From a maintenance point of view, when a user is added I'd like to update security for that user and only that user (meaning not having to updated folder security settings for all existing user. One last piece of information for cost purposes we are using the Home version of Window 10. Upgrading to Windows 10 Pro is not in the budget. Also, we do not have an IT department so hopefully the solution is something a teacher can implement.

I appreciate any help or assistance. Lastly, I'd like to avoid registry changes but if that is the only simple way then so be it.

Jerry

Hi there. Not sure if it can be done in Home edition, but I believe everything can be accomplished via Group Policy, but it's way beyond my knowledge to instruct how.

Open Local Group Policy Editor in Windows 10 Security System Tutorials

I've tried DENYing privledges to the group Everyone but all that did was make it so no user could see any folder. I had the same result when DENYing to the group Users.

I don't understand or don't know if there is any rules or precedence or hierarchy where I can DENY Everyone but then ALLOW for a specified User. Seem that DENY outranks ALLOW and that is a problem.

I still don't see a way to allow a User to only access their files and not be able to access or see other user's file. I have a hard time believing this can't be done. Hope someone out there can point me in the right direction,

Thanks

I refer you to post two you must set ALLOW before you set deny do that and it works be sure to allow admin and user

Samuria,

This did not work. Here is what I did.
0) Created a folder on X: with the name Jerry
On the security tab, I did the following

1) the Administers group was already set to Allow (gray check marks)
2) my personal account is already set to Allow (black check marks)
3) I set Users group to Allow. It was already Allow but not for certain things
4) Added the group Everyone and set it to Deny

What happened was I was not able to access my own folder (Jerry) on the X: drive.

Going back to simple way why can't they just save in their own profile that doesn't need setting up? Or what about post 8 brinks idea