Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Local Security Policies vs NTFS Permissions

01 Nov 2012   #1
DextrousDave

Windows 7 Ultimate x32
 
 
Local Security Policies vs NTFS Permissions

Hi All.

What exactly is the difference between Local Security Policies and NTFS permissions.
Scenario: I want to add a power user to my computer with the following do's and don'ts:

Do's:
  • Can Do all the things a Power user can such as: Installing programs and devices, drivers, access command prompt
Don'ts
  • No Administrative Privileges, especially NOT to be able to use the 'Take Ownership' permission
  • Cannot delete anything except things he has Ownership of(created himself)
  • Cannot Uninstall Any programs, except the Ones he installed
  • Cannot access unauthorized folders and files as set up by permissions
I can add him to Power Users group, but then he won't be able to add devices right...


As I understand, NTFS permissions:
Enable you to set Modify, Execute, Read and Write permissions on files, folders and programs right...(since a program is just a file)

and

Local Security Policies:
Enables you to do specific things such as: Deny a user access to command prompt, or regedit. Allow a user to install programs but not drivers etc...


Or am I wrong here?


Thank you


My System SpecsSystem Spec
.

01 Nov 2012   #2
x BlueRobot

 

NTFS Permissions Overview

Windows Local Security Policy Settings - Microsoft Windows Tips


Hope the above links explain the difference between the two.
My System SpecsSystem Spec
02 Nov 2012   #3
DextrousDave

Windows 7 Ultimate x32
 
 

Thank you BlueRobot, that does help clarify things
My System SpecsSystem Spec
.


02 Nov 2012   #4
x BlueRobot

 

Quote   Quote: Originally Posted by DextrousDave View Post
Thank you BlueRobot, that does help clarify things
Your welcome, just glad to help (:
My System SpecsSystem Spec
Reply

 Local Security Policies vs NTFS Permissions




Thread Tools





Similar help and support threads
Thread Forum
SRP (Software Restriction Policies) blocking local Administrator
I implemented SRP on a Windows 7 Pro PC that I was logged into as the Local Administrator. In Enforcement I ensured that "All users except local administrators" was selected. I then set the default Security Level to Disallow. At this point I attempted to open Windows Update from the Start menu and...
System Security
Membership of local built-in group "Users" -- NTFS permissions
Dear, Can somebody help me? My initial admin account (made with the installation of windows7) is Marie. When I look at the Local Users and Groups snap-in of MMC, she's member of the group administrators but not of the group Users. BUT then I made a folder "Test". I disabled the...
Network & Sharing
NTFS Security Permissions
I was screwing around with the permissions in Win 7 Premium, C:\Windows\winsxs and I now have them in a mess! System Restore wont work. Trying to rest the permissions with icals. From an elevated command prompt I did this: C:\Windows\winsxs>icacls * /T /Q /C /RESET After running awhile I...
System Security
Local Hard Drive (*c) changed to NTFS by clicking on "permissions of r
how to handle this? did system restore.. no change to ntfs local disk. local disk changed to ntfs. cannot open local disk C: no windows action center, not working all including: Device Manager, Remote Settings, System protection not format...
General Discussion
Network Group Policies Help: Need to add Local User
I had a network guy come in and he locked a lot of my group policies out. It shows that the Administrator account is locked and disabled. I need to get into this computer and it is urgent. I have tried enabling the administrator account doing net user administrator /active:yes and it said it was...
Network & Sharing
Local Policies
Hi everybody, I'm new in thios forum and new in Windows 7 I have a question, if someone can help me, i will be grateful. How can i set to my Win 7 local polocies for users. I want only my user to LogIn in my Computer, and everybody to have access denied Tanks !
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App