Solved Making files undeletable

[roboticarm]

Hi everyone.

I have Windows 7 HP with 2 user accounts. 1 admin and other under the "users" group. I have a folder on the HD that I don't want the any "user" to access except admin. What I have done is set the folder attributes to hidden and system protected (attrib +s +h). Now the folder is not visible until a user enables viewing of protected operating system files in folder options. But he/she can search Google and still find out how to enable viewing of all hidden files including system protected folders/files. So this isn't a foolproof method. So I started encrypting the files and now they appear in green color and are not accessible in other user accounts.

But I'm afraid if the user somehow finds and deletes them. How can I make those files undeletable?

 

[UsernameIssues]

Welcome to the Seven Forums.

See if this info helps you:
http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

 

[roboticarm]

Thanks UsernameIssues for the prompt reply!

I read the article but I find it a bit too complicated, there are a lot of "steps" and I don't get which ones should I perform and which ones not.

Can you please explain the same in a shorter way? I am scared to mess with the permissions.

 

[UsernameIssues]

I might be able to explain it in a shorter way, but first, let me ask:
Can the folder that you want to limit access to be placed on the desktop of the admin user?
Does the admin account use a password?

 

[sisrace]

Oups.... Hehe. thought of helping you. made a hidden map. and cant find it or delete it..

 

[roboticarm]

@UserIss As far as I understand you, that folder is not on the desktop of the admin account but I can place it temporarily if you ask me to do so. And yes, the admin account has a password.

Thanks in advance.

 

[UsernameIssues]

Does it matter where the folder is?

Can it stay on the desktop or in another folder that the admin uses (My Documents, My Pictures, ....)?

 

[roboticarm]

Yeah it does matter. Sometimes I have to give others users access to admin account temporarily. I dont want them to access that folder anyway so I have placed that folder at a safe location. It would be great if its possible to make it undeletable at that safe location.

Thanks in advance.

 

[UsernameIssues]

Thanks for the additional info. The fact that you temporarily have to give others users access to admin account changes everything. Anyone with access to that account can delete most anything. Also, if you (as admin) need to be able to edit files in this folder, then I think that your admin account must be able to delete files within the folder.

It is probably time to not reply on NTFS permissions and move the folder/files to a USB flash drive. You can keep them encrypted, but having them on a flash drive (or an external USB drive) that you can remove, should keep others from deleting the folder and its contents.

Also, since these files are important, you should be keeping them in more than one place as a backup.

 

[roboticarm]

Thanks for the reply.

Yes I do have proper backups. When I need to give other people admin access, I will be present in person before the machine to make sure that they don't delete the imp data. But I still want that data to be undeletable through any other user account other than my admin account. Is it still possible? Something up with those permissions? I tried but it's quite confusing. After changing the permissions, I myself was unable to access the folder or delete it. Then I had to take ownership of the folder to regain access to it.

Thanks.

 

[UsernameIssues]

As you found out, folder/file permissions should be able to prevent users from getting to the folder. You just need to understand how to retain access for your admin account. I cannot walk you thru that right now - maybe later.

 

[roboticarm]

As you found out, folder/file permissions should be able to prevent users from getting to the folder. You just need to understand how to retain access for your admin account. I cannot walk you thru that right now - maybe later.

Maybe it's a bit too complicated for me...

Though I can wait, it's not that urgent.

 

[UsernameIssues]

See if this helps:

You might want to watch this at 720p and in the full screen mode.


You will want to add your admin account where you see me add username.

 

[roboticarm]

See if this helps:

You might want to watch this at 720p and in the full screen mode.


You will want to add your admin account where you see me add username.

Oh man that worked like a charm! Microsoft should have made it simpler...it's too complicated though works fine!

Thankyou UserIssues so much! I can't rep you - forum is asking me to distribute rep elsewhere, lol

 

[UsernameIssues]

Glad that it worked