Create User with restricted access

[bindoksala]

Hello

I want to create an user with following properties

- User should not have access to any of the drives
- Only one folder created in drive D should be accessible to this user
- The folder created on D drive should not be more than 1 GB
- The user should not able to install any program

 

[Boozad]

Have a read through http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

 

[Pyprohly]

- User should not have access to any of the drives

Paradox. A local user's profile must be on the C drive.

- Only one folder created in drive D should be accessible to this user

Okay, see Boozad's link above.

- The folder created on D drive should not be more than 1 GB

Using Local Group policy, you can assign the disk a quota, or you can assign all user's profiles a quota collectively. You cannot assign quotas to individual user accounts.

Your best bet is to create a 1 GB partition for that user. Mount the partition to a folder.

- The user should not able to install any program

Easy, simply don't set the user account up as an administrator.

 

[GokAy]

I remember setting a quota to a particular user 2.5 months ago. I prepaired friend's laptop to be used by his son. Used windows Explorer - partition properties - quotas (didn't know about group policy, good to know). Are we talking about 2 different things?

 

[LMiller7]

Using the Quota tab of the volume properties you can assign a quota to an individual account. No need for Group Policy. That goes all the way back to Windows 2000.

 

[Pyprohly]

Ah, you guys are so right.

There is a Quota tab under the properties of NTFS formatted volumes. And it is indeed able to assign Quotas to individual users.

(didn't know about the Quote tab, good to know)