Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Hiding system folders on a shared computer

02 Mar 2014   #11
apertotes

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by UsernameIssues View Post
The NTFS access and deny permissions should be unaffected by returning ownership to the TrustedInstaller. You can test it on one folder before fixing the other ones. Here is a tutorial on how to do that: TrustedInstaller - Restore as Owner (The steps are the same in Vista and W7.)

The reason for returning ownership is: "ownership" is part of the Windows security model. This helps to prevent changes to these protected folders by not allowing user accounts (even admins ones) to change/infect files.
First, I wan to say thank you and carwiz for you detailed help.

And second, in the thread you linked they say that not all files and folders should be owned by TrustedInstaller, and there was even one user that after doing that could not install or uninstall programs anymore. But I am a bit confused, because it seems in his case it was only Norton, and also in some posts they were talking about the windows folder, not program files.

So, is there any way to know if returning the ownership of Program Files folders and subfolders and files to Trustedinstaller will create a bigger mess than leaving it as it is now?


My System SpecsSystem Spec
.
02 Mar 2014   #12
UsernameIssues

W7 Pro SP1 64bit
 
 

You are welcome. Helping in forums is an entertaining and educational hobby for me. Some people read a good book, I read a good forum or two :-)

I would not worry too much about the member that had an issue with Norton, there is not enough detail to determine what else that forum member might have done to things. It is easy to forget to select the option to propagate changes to all files and sub-folders.

I seem to recall that you changed things in the Steam folder. I understand a tiny bit about Steam, but I'm not a gamer. (Okay, so I did waste hours trapping a stupid cat. But that is not the same thing :-)

I have the luxury of using Virtual Machines (VM). I'm installing Steam into a VM and a free to play game - just to see what account should own those folders/files. I'll post back when I know more.

For the other folders/files, we may need to ask forum members that have the apps.
My System SpecsSystem Spec
02 Mar 2014   #13
apertotes

Windows 7 Ultimate x64
 
 

I changed 2 things:

1. Ownership on both Program Files folder, with subfolders and files, from Trustedinstaller to myself (and I am the first account that was created, and with administrator status, UAC deactivated)

2. Deny permissions to my son's account for Steam and Nvidia Geforce Experience folders.

What I am worried is that maybe when I changed the ownership not every file and folder inside the Program Files folder was owned by Trustedinstaller, and by changing it again and giving Trustedinstaller ownership of every single file and folder I break something.
My System SpecsSystem Spec
.

02 Mar 2014   #14
UsernameIssues

W7 Pro SP1 64bit
 
 

This was funny:

Hiding system folders on a shared computer-steam1.png


The top level folder for Steam is owned by:
Hiding system folders on a shared computer-steam2.png


Glancing thru the sub-folders (and some files)...
...shows them to be owned by the account that installed them.
Hiding system folders on a shared computer-steam3.png


Upon re-reading this thread, I noticed that you took ownership of the entire Programs Files folder structure (as opposed to just the folders that needed restrictions). So, let's follow the general rule that stuff that Windows installs should have TrustedInstaller as the owner and stuff that users installed can keep your account as the owner. This rule is very general because user installed apps can have the TrustedInstaller as the owner too.


Work thru each of the folders shown in the right hand pane and set the TrustedInstaller account as owner:

Hiding system folders on a shared computer-w7-1.png

Hiding system folders on a shared computer-w7-2.png


My System SpecsSystem Spec
03 Mar 2014   #15
apertotes

Windows 7 Ultimate x64
 
 

Wow! That is so incredibly helpful! Thanks a lot!

By the way, I am a complete noob in all these permissions and accounts and group policies, so spending many hours during the weekend trying to achieve my objective, I could not help but wonder if it would have been easier in a different OS, like MAC OS or linux. I guess that given the name of this forum most users won't be specialists in other OS, but I am sure that there are also many that also know quite a bit about them.
My System SpecsSystem Spec
03 Mar 2014   #16
UsernameIssues

W7 Pro SP1 64bit
 
 

I know a tiny bit about the Linux/Unix file permissions setup and while Apple has changed a lot of things, the underlying OS is BSD. I think that the file permissions for Apple's iOSes and BSD are still the same. As I understand it, those OSes do not use inherited permissions.

In other words...
...if I setup a file server using Ubuntu
(the desktop version - 'cuz I need a GUI)
...and I shared a folder for all accounts to use
...then your account made a sub-folder in that shared folder
...your co-workers could not get to those files.

That does not work well in an office setting were the folder was meant to share files for all workers. In Windows, the sub-folder would have automatically picked up the permissions of the parent folder.

As far as restricting a child from using apps on Linux/Unix/Apple OSes...
...as the saying goes, "There is an app for that."

Windows has an app for that too. It is called Parental Controls and it can get into a state were the Parent cannot change stuff. I don't suggest it to people.
My System SpecsSystem Spec
03 Mar 2014   #17
apertotes

Windows 7 Ultimate x64
 
 

I took a look at parental controls, but what I did not like that if the monitored account would try to launch a forbidden program, they would get a message saying that they needed to contact their administrator. I do not want a whistle blower telling my son that I am hiding games from him. I want it to be as silent and invisible as possible.
My System SpecsSystem Spec
Reply

 Hiding system folders on a shared computer




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Shared folders on Windows 7 computer not visible to other computers
I have a homegroup with several Windows 7 and Windows 8 computers. One of them is Windows 7 PC with external My Book that contains several folders I need to share with other computers. I have been able to successfully share two of the folders but no matter what I do I can't get the other two...
Network & Sharing
Cannot access shared folders or HomeGroup shares on this computer
The HomeGroup shares have been a recurring issue that I haven't been able to solve, but the really perplexing one is the shared folder issue which just cropped up. Some of my shared folders still work, but e, g and h (music and video respectively) for some reason spit back "Access Denied" on all of...
Network & Sharing
Non-shared folders showing up and shared folders not
I have an Android tablet and my PC running Windows 7 Pro. I am using ES File Explorer on Android to see shared folders. I added some folders to the Music/Picture/Video libraries and shared them in a homegroup. I tried to make the homegroup not need a password and it'll let me access my PC from...
Network & Sharing
Homegroup folders shared, but will not expand on other computer
I've placed two computers in a homegroup. Computer 1 can access Computer 2's shared folders, however, Computer 2 cannot access Computer 1's shared folders. When attempting to access the shared folders (with read/write permissions), I get the spinning wheel and then it just eventually says 1 item...
Network & Sharing
One computer, two accounts and only a few sub-folders shared
Hello everyone, I have a problem at my work. A person from HR is leaving for a vacation and we will have her assistant working on her computer. However, due to confidentiality of most of the information we want her assistant to have access to only a few of her sub folders. I have tried using...
Network & Sharing
Files & Folders Gone Hiding
I recently upgraded my system from Win XPPro to Win 7 Ultimate. My system runs smoothly except this weird thing I hardly don't understand. When I go to "My Computer" all the partitions created with the former OS are visible. Free spaces and Used spaces are visible as well, but when I open one of...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:00.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App