Quote: Originally Posted by NewToit
WHAT THE HECK ARE ALL THOSE ACCOUNT NAMES? They all were not there in you picture, I do did not put them there. Her account only shows up when I 'add' it.
Authenticated Users <--- What the HECK is this
System<--- Is this a default something or other?
Donotuse(Daddy-pc\Daddy)<--- This is the username I created as ADMIN
Administrators(Daddy-Pc\Administrators) < This is the default admin?
Users(Daddy-PC\Users) <--- This is the users group? I did not create it
- It's just a system... Windows, It's components, some programs (usually AV programs) and things like that. Just open Task manager, go to processe, click Show from all users and you will see open process from System. (at the end, you don't need and don't want to modify it, leave it alone) Donotuse(Daddy-pc\Daddy)
- Yes, it is your Account. Administrators(Daddy-Pc\Administrators)
- In a way yes. It is user Group. It is group which may contains several other users inside it. (it's made to make sytem admistrators life easier, so they will modify groups instead of 100 users individually)
In your case this is Administrators' group, so it contains all Administrators on your PC including your own Admin account. (so in your case you and default hidden Admin (which is disabled anyway now)) Users(Daddy-PC\Users)
- same as above, but for users instead of administrators.
Imagining if you had 2 daughters and separate account for each of them, you can just modify this group instead of modifying each separately. Authenticated Users
- This one is a bit complicated. It is something like group but actually not group. It's something to do with networking and null sessions. (You don't need it, Just leave it)
*If you look at the second picture you see for the family account I have everything ticked deny. Then on the right side if I remove the ticks(from allow/deny) it simply removes her user name
Ahhhhhh! Somehow, I know accounts can inherit permissions from groups or other accounts which override others? Is that what is going on? When I log onto my CPU the only two accounts are: Donotuse/Family
ahh.. My bad.
You are right just tick "Full control" deny instead of unticking Allow.
And about "inheriting permissions": If you tick deny as said above, deny will always work first and will have more priority then inheritated rights.
You have 2 daughters.
3 accounts: You (administrator), first daughter, second daughter (both of them standard users) 1.
You will create Deny rule to Users group to some folder.
Both of them will be denied although they have allow rule on their account. (but both of them members of "users" group, so deny from this group will block their allows) 2.
You will create Allow rule to Users group.
And will create deny rule for one of first daughter.
Your first daughter will be denied access (regardless the fact that she is member of Users Group which has allow rule)
Your second daughter can access because she dosen't have any deny rules.
When I log onto her account(user) and unhide folders then click the folder a dialogue box pops up even if I deny her access.(**Picture of Error included). The box says, 'press of to obtain access'.
hmm... yes I see.
But they can't do anything or obtain access unless they provide admin Password (YOUR password which they don't know)
So when they press obtain access they will promoted with UAC which will ask them for admin password. There is no chance they can break it without Admin password if they have Everthing denied.
So, you should just keep your password private.
(for example try going to: C:\Users\Your_admin account with your Family account.
You shoulnt have allow access so will be asked the same question.
So your Family members can't access user files.
"My documents", "My videos", "desktop" and stuff like these.
Hope it's all clear now.
If you have anymore questions, Please ask.