Solved How to deny the search for specific pathes in WinExplorer

[AhdHilali]

I have a hard disk with 5 partition and wants to restrict access to three of them for the other accounts(standard) in my computer, so I used the group policy editor and deny-ed the access to it for each account.But they still can get to the files in these 3 partition and open them by typing the file path or name in the search box in the windows explorer.
so how to protect these files from being viewed and permanently deny access to the 3 partition?

 

[SmithUnwesson]

I have a hard disk with 5 partition and wants to restrict access to three of them for the other accounts(standard) in my computer, so I used the group policy editor and deny-ed the access to it for each account.But they still can get to the files in these 3 partition and open them by typing the file path or name in the search box in the windows explorer.
so how to protect these files from being viewed and permanently deny access to the 3 partition?

Have you considered encrypting the partitions? That would be the most secure and reliable option for restricting access. I would suggest using this:

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux

Ive been using this for years. More specifically, I've been using it for hidden partitions on my laptop internal HDDs, thumb drives and external portable HDDs. Here is some info directly from the site:

Free open-source disk encryption software for Windows 7/Vista/XP, Mac OS X, and LinuxMain Features:

• Creates a virtual encrypted disk within a file and mounts it as a real disk.
  
  
• Encrypts an entire partition or storage device such as USB flash drive or hard drive.
  
  
• Encrypts a partition or drive where Windows is installed (pre-boot authentication).
  
  
• Encryption is automatic, real-time (on-the-fly) and transparent.
  
  
• Parallelization and pipelining allow data to be read and written as fast as if the drive was not encrypted.
  
  
• Encryption can be hardware-accelerated on modern processors.
  
  
• Provides plausible deniability, in case an adversary forces you to reveal the password:
  
  Hidden volume (steganography) and hidden operating system. More information about the features of TrueCrypt may be found in the documentation.

Hope this helps
N-Dexter

 

[FliGi7]

Right click on each partition in explorer and modify the Security controls to only allow your username, admin, and system accounts access to them.

 

[AhdHilali]

Thank you SmithUnwesson,It`s pretty good program But can I lock the disk useing this tool without restarting the computer?

 

[AhdHilali]

Thank you FliGi7http://www.sevenforums.com/member.php?u=171443,It`s It`s precisely the thing I needed to do.

 

[SmithUnwesson]

Thank you SmithUnwesson,It`s pretty good program But can I lock the disk useing this tool without restarting the computer?

Yes it is possible to lock the disk without restarting. You just need to open the program and dismount the disk.

 

[AhdHilali]

Thank you SmithUnwesson,It`s pretty good program But can I lock the disk useing this tool without restarting the computer?

Yes it is possible to lock the disk without restarting. You just need to open the program and dismount the disk.

Thank you SmithUnwesson I guess this program will get my needs specially with this possibilities

 

[AhdHilali]

now I have another question:
I have 2 administrator accounts(Administrator, Test) and 2 standards (stnrd,MTN)
I can`t access (using any account) to some folders in the local disk (D) after I:

1-Denied every thing from (D)`s properties (security tab) for the account Test.
2-Re-allowed every thing from (D)`s properties (security tab) for all accounts.
3-Disabled the search action in the explorer.
4-turned on bit locker-(on D)-I have the password to unlock.
And now I can`t change permissions for these folders & files from any account even a new created administrator.

And One more question how to restor the administrative tools to defaults when you can`t access to it.(But can access other account`s administrative tools)

 

[SmithUnwesson]

Before you begin, unlock Bitlocker so that all files/folders are freely accessible.

If you haven't already, you will want to activate the "Built-In Administrator" account that has unrestricted access to all accounts regardless of permissions (Unless you have specifically denied access to this account). I would suggest following these instructions here:

Built-in Administrator - Enable from WinRE by Flavius
​

Now, while you are logged in with "Built-In Administrator," you need take ownership of the files/folders in question by following these instructions:

Context Menu - Take Ownership by Brink​

Now that you have taken ownership of the file/folder, you should be able to view the permissions using the security properties tab. Now you can create the proper folder permissions to each file/directory by following instructions here:

Permissions - Allow or Deny Users and Groups by Brink
​

Once you have successfully obtained access to all of the files in question, create a backup of all files on a separate HDD.

To answer your last question, administrator tools should automatically populate in the start menu and control panel for any new administrator account. Unless you have deleted or disabled access to the 'all users start menu' folder that contains these shortcuts. The default location for these files is:

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
​

Make sure that you can access this folder while logged in as "Built-In Administrator" and set the permissions properly. If the links are missing from this folder, you will need to manually recreate them. Follow this tutorial:

Administrative Tools - Restore Shortcuts by Brink

File and folder permissions can be tricky and should only be changed if you are familiar with how/why to do so. Take the time to read through the tutorials here on sevenforums so you can avoid any future problems. And as always, maintain up-to-date backups of any/all important data.

Happy Travels,
Tim
​

​

 

[AhdHilali]

Before you begin, unlock Bitlocker so that all files/folders are freely accessible.

If you haven't already, you will want to activate the "Built-In Administrator" account that has unrestricted access to all accounts regardless of permissions (Unless you have specifically denied access to this account). I would suggest following these instructions here:

Built-in Administrator - Enable from WinRE by Flavius
​

Now, while you are logged in with "Built-In Administrator," you need take ownership of the files/folders in question by following these instructions:

Context Menu - Take Ownership by Brink​

Now that you have taken ownership of the file/folder, you should be able to view the permissions using the security properties tab. Now you can create the proper folder permissions to each file/directory by following instructions here:

Permissions - Allow or Deny Users and Groups by Brink
​

Once you have successfully obtained access to all of the files in question, create a backup of all files on a separate HDD.

To answer your last question, administrator tools should automatically populate in the start menu and control panel for any new administrator account. Unless you have deleted or disabled access to the 'all users start menu' folder that contains these shortcuts. The default location for these files is:

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
​

Make sure that you can access this folder while logged in as "Built-In Administrator" and set the permissions properly. If the links are missing from this folder, you will need to manually recreate them. Follow this tutorial:

Administrative Tools - Restore Shortcuts by Brink

File and folder permissions can be tricky and should only be changed if you are familiar with how/why to do so. Take the time to read through the tutorials here on sevenforums so you can avoid any future problems. And as always, maintain up-to-date backups of any/all important data.

Happy Travels,
Tim
​

​

Hey Mr.SmithUnwesson!
Thank you for the quick answer.
I`m going to follow this tutorial to fix the problem, and I`ll tell you about the results soon.
Than you very much

 

[SmithUnwesson]

Anytime Good luck!

 

[AhdHilali]

Hey Mr.SmithUnwesson
I used the tutorial you gave me and it helped me very much
I`m really greet full
Thanks very much.

.................................Ahd...................................

 

[SmithUnwesson]

No problem Glad it helped!