Hard Drive permissions, seem quite weird

[CriticalError]

I have a new hard drive, internal.. I want to setup permissions on it so that only administrators can read/write/delete data, and normal users can view data, but they should be able to delete data from their own folders or folder that they own...

I set up permissions on the drive for Users (Group) so that they can list folder/read data, read attributes, read extended attributes, for "This folder and sub file folders" and also did it for Administrators group giving them full control, however I as an admin then cannot create/delete folders...??

 

[Alejandro85]

Actually, that's quite similar, if not the same, to the default Windows permissions for the default install. Admins can read/write everywhere (except where the annoying TrustedInstaller shows), and any other regular user has read/write on his own folder (under c:\users\<username>), no access to someone's else folder, and read only everywhere else.

For placing such permissions, you can give the admin permissions on the root folder you like, then on the each user particular folder, open the advanced permission dialog and add that particular user, giving him full control and possibly ownership, in addition to the inherited permissions. You have to untick the inheritance if you want to prevent others to see each other's data. I almost always leave the "location" option alone in the default selection (this folder, sub folders and files, if memory serves).

 

[CriticalError]

I don't think I will use the hard drive for much user data, it's a spare 300GB HDD, and mostly will be used for steam games and other PC games, the issue is, I do not want users to be able to delete the games or rename anything, could lead to serious issues.

I hate the way Windows has configured permissions. For the WHOLE hard drive when I add permissions to it I add two Groups Users and Administrators if I disallow usersgroup to read/write (their default permissions) then I cannot access the drive! Even though I am Admin and give Administrators full permissions.

The reason why I prefer to do this the group method is because when you add accounts later on it avoids having to add each account..