Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: UAC, hiding folders, creating a secure and safe Win 7 environment

26 Dec 2011   #1
CptSupermrkt

Windows 7 Ultimate x64
 
 
UAC, hiding folders, creating a secure and safe Win 7 environment

Hello there.

I've been a horrible home user of Windows for years --- my policy has consistently been to just be Administrator all day, every day, install random stuff, never uninstall anything, never question the origin of that questionable ".exe", etc...

So I formatted and am taking a new approach --- I will never log in as Administrator except to do administrative stuff like install software and upgrade drivers. I will use a Standard account for myself for everything else from playing games to organizing my music.

What I want to do, though, that I can't figure out, is basically lock my Standard user account down so it can't even possibly mistakenly do something administrative. I wish to be strict on myself, if for no other reason than to get me to stop working at 120 mph and THINK before I take an action that could potentially do more harm than good.

That being said, I basically figured out some basic functions of MMC and the idea of group policies. But I already found something that bothers me that I can't seem to fix:

As Administrator, I downloaded a program called CPU-Z to do some hardware stuff. I do not want this program to be visible to any Standard account in any way, period. Yet, when I log out, and log in as a Standard user, there it is, right in the Start Menu.

Using the group policy to specify programs that CAN'T be run, indeed I can "intercept" the attempt to run it from another account, but it shouldn't be visible from any other account, period.

Basically, I want my Standard accounts to see ABSOLUTELY NOTHING, except!!! for the programs and folders that I explicitly choose as Administrator. The other goal here is to create a completely clean and clutter free interface for myself and my average-user wife, so that when we log into our own accounts, we don't even have the chance to be confused, or accidentally click something, nothing should be visible, period, as a Standard user, unless I explicitly choose for it to be visible for that particular user.

I'm not interested in just "hiding" the folder/applications universally, or just removing them from the Start Menu universally, because I DO want everything to be visible from the Administrator account.


My System SpecsSystem Spec
.
26 Dec 2011   #2
alphanumeric

Windows 10 Education 64 bit
 
 

Click the start orb and then right click on "All Programs". You should see Open and Open All Users.
"Open All Users" is the start menu everybody See's.
C:\ProgramData\Microsoft\Windows\Start Menu
"Open" is the start menu for that logged in user. For example mine is
C:\Users\Kerry\AppData\Roaming\Microsoft\Windows\Start Menu.
I do believe what is in there only shows up in the start menu when I'm logged on. You could try putting that app in C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu.
Even if you do that though anybody could still run it by finding its folder in explorer and running the exe file.
My System SpecsSystem Spec
26 Dec 2011   #3
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Welcome to Seven Forums CptSupermrkt.
Many program have two install options, Install for all users, and, Only for me. Try using the latter when installing from your Admin account.
CPUz would be fine for all users, it can't change anything, it is just a monitor and hardware viewing utility.
My System SpecsSystem Spec
.

26 Dec 2011   #4
lehnerus2000

W7 Ultimate SP1, LM18 MATE, W10IP VM, W10 Home, #All 64 bit
 
 
Adjust Permissions?

As alphnumeric says, you can move the shortcuts to the Administrator's Start Menu.

You could set the "Hidden" attribute on the specific program folder (e.g. CPU-Z) to stop casual browsing.

Make a backup image before trying the options listed below.
You could also adjust the permissions (folder "Properties" window > "Security" tab) on the specific program folder (e.g. CPU-Z) so that "Administrator"/"Administrators" is the only User/Group with rights (i.e. you could remove "Authenticated Users" and "Users" from the list or restrict/remove their rights).

Do not remove "System" or "Trusted Installer" from that list.

If you are unfamiliar with adjusting permissions (this can be tricky) you could easily make a critical system-destroying error (hence the absolute necessity for a backup image).

If you have a viable backup image (two would be better) you can afford to experiment.

My System SpecsSystem Spec
27 Dec 2011   #5
logicearth

Windows 10 Pro (x64)
 
 

Every user can have their own start menu..
C:\Users\[USERNAME]\AppData\Roaming\Microsoft\Windows\Start Menu

Put the things you only want your administrator account to have in its start menu folder.
However, honestly if you are running under a standard user account you cannot mistakenly do something.
My System SpecsSystem Spec
Reply

 UAC, hiding folders, creating a secure and safe Win 7 environment




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Invalid path in environment variables. Safe to delete?
Hi. Is it safe to delete the entry shown? I don't see a folder anywhere on C: (windows partition) named BVTBin even with super-hidden files shown. I'm asking because I don't understand why the entry exists.
Performance & Maintenance
Creating New Folder ends up creating 2 or 3 new folders.
Under computer I go to my drive of folders. When I click new folder either by right clicking or by hitting new folder the system then creates 2 or 3 new folders at one time. I then have to go back and delete the extra folders. At first I did not mind because it only happened once or twice and now...
General Discussion
Hiding Folders/Files
Okay, so maybe I'm just over thinking here, but say you hide a file, sure you can access it through changing the folder options from show to do not show. But the problem is so can anyone else, so whats the point of hiding stuff unless you're hiding it from someone who is a novice at windows 7. My...
General Discussion
Best Practices for Creating a Secure Guest Account
Best Practices for Creating a Secure Guest Account In some environments, you might need to set...
General Discussion
Files & Folders Gone Hiding
I recently upgraded my system from Win XPPro to Win 7 Ultimate. My system runs smoothly except this weird thing I hardly don't understand. When I go to "My Computer" all the partitions created with the former OS are visible. Free spaces and Used spaces are visible as well, but when I open one of...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:51.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App