Solved [Query]How to lock folders in USB ext drive?

[onlytanmoy]

Dear All,

Here is the scenario. I want to create a folder say 'abc' in an USB external hard drive.
The files inside that folder 'abc' should be read-only for all other users except me.
So, whoever using that ext hard drive in their machine, will be able to view or copy the files only, no cut-paste or delete will be allowed.
If it is possible to achieve via any 3rd party tool, you can suggest me that too.

Thanks in advance,
Troy.

 

[Roderunner]

Hi Troy,
the easiest method is to password protect your files using 7Zip

 

[onlytanmoy]

Hi Troy,
the easiest method is to password protect your files using 7Zip

no, i do not want to password protect the files...the files can be accessed but in a read-only mode only.

 

[FaberTech]

Log into your admin account>Right click on "ABC" > Properties> Sharing>Share>Set permissions for "everyone" to "Read"

You have to have NTFS format on your usb stick for permissions to work properly

 

[Slartybart]

Faber,

Excellent! Do you know if this works on the top-level permissions? Say for instance the stick is my G:\ drive - can I set permissions for the entire drive and is that advisable?

RtClick G:\ ==> Properties ==> Security ==> Everyone ==> Mark Checkbox "Read" and "List Folder contents" and Clear all other Checkboxes for Everyone (or mark deny for other functions)

A user might have to manipulate security to suit their needs (changing Amin and authenticated user trights). This approach doesn't limit the "protection" to a single folder. It might however create other difficulties. What are your thoughts?

Peace!

 

[FaberTech]

Sorry I went to sleep shortly after my last message

Right click on "G:" > Properties > Security > Advanced > Change Permissions for "everyone" > Select "Everyone and click Edit... > Check boxes "List folder /read data", "Read attributes", "Read extended attributes" "Read permissions" and make sure you have all others unchecked DO NOT CLICK DENY for anything or you may loose control of your partition completely. denying permissions to "everyone" will override all other permissions settings. Click OK.

Return to the permissions menu > click Add... > You can either type your administrator user name and click "check names" > or click advanced > Find now > search for your administrator user name > click OK

Check the box for "Full control" > click OK

After you see both Everyone, and your administrator account listed in the permissions entries dialog box, check the box for "Replace all child object permissions with inheritable permissions from this object". If you dont, the new set permissions will only be set to the root directory of this partition. So make sure you have this box checked so that all folders and sub folders will have the same permissions.

If you ever wish to go back and add another user with custom permissions (Lets say your spouse, best friend or co-worker you trust), make sure to re-check that box again when your finished. Hope this helps

 

[onlytanmoy]

Many thanks Faber...this is exactly what I was looking for

Extra credit for making this possible without any 3rd part app

I am now marking this thread as 'solved'.

 

[FaberTech]

My pleasure ----------------------------------------------------------------------------------------------------↑

 

[Slartybart]

Thanks - this is a good thing to know
DO NOT CLICK DENY for anything or you may loose control of your partition completely. denying permissions to "everyone" will override all other permissions settings.

I wasn't sure which user took precedence Everyone or MyOwn - now I am.

 

[FaberTech]

It actually gives you a disclaimer telling you so when you check any deny options. But knowing me, out of curiosity, I had to try. At least it was a test on a blank partition. I had to reformat.

 

[F5ing]

I think NTFS always evaluates deny selection first and therefore will take precedence over any allow.

You can test against specific users/groups by drilling a little deeper into the dialogs (Advanced button) to see how NTFS will evaluate your selections.

 

[FaberTech]

here is information if anyone ever looses control of your disk by using the deny option.

Take Ownership of file - Vista Forums