I can't seem to simply create a second user who has no access to files/programs on the computer by default. From what I read, that's supposed to be the default behavior? When I try it, the new 'Standard user' account can see all programs and files. I haven't previously changed permissions or anything on this PC.
In the User Account - Create you should be able to use Parental controls to limit programs and file access (although I haven't had to do so myself)
You should be able to create a standard user accounts on your computer and reserve administrator permissions for your user account, you’ll have to type your account’s password whenever a standard user wants to install or access restricted programs.
After that I believe you can right click on any application and set the permissions (or disallow run)
You could also use Group Policy Editor - Quickly View Enabled Policies in Windows
If you have Windows Ultimate you could also use AppLocker - Create New Rules
Ok thanks for that, I may try one of those. But still, why isn't mine working? Isn't that the point of separate users, that they have a separate work space? I've read that this is how 'Standard User' is supposed to work but mine isn't. Something else (maybe another program?) must have altered this behavior on my system, but even then shouldn't there be an easy way to reset it? Of course the built-in Windows help is, as usual, 100% useless.
I think there may be some confusion here. A standard user by default shouldn't be able to see other users workspace (c:\users\username)
Other than that a standard user have read access including to "c:\program files" where programs are installed. Any individual program data however are usually stored in the users workspace, ie c:\users\username\AppData or the users desktop, documents etc. All stored under c:\users\username
When you install a program you might recall getting a question to install it for the current user or all users. Programs installed for all users will be available for all users. As previously mentioned Parental Control is one way of limiting programs to a user.
Tookeri thanks for clearing that up. I'd been assuming everything would be separate when in fact it's just the user's folder as you mention. So after fiddling to no avail with the ridiculous user permission dialogs in the Security tab, I just made some folders Hidden. Good enuf.
That simple tasks are inexplicably complicated, combined with utter garbage user documentation written by robotic-like humans, has been Microsoft's problem from the beginning and is the cause of the fully justifiable hatred towards them.
Quote