Windows Vista Security Permissions

Im having some problems creating permissions on this computer.

User1 should have access to everything unrestricted.

User2 should have the opposite, access to nothing except his Documents, Desktop and only read and execute permissions on E drive.

Problem 1:

User1 is a member of the Administrators group and User 2 is a member of the users group. In the security tab of a drive I add the group Administrators and the group Users. I then set Administrators Full Control and Users denied access. Then I login to User1 to find I can no longer access that drive even though I allowed the Administrators group permission? If i delete the Users group permission is then allowed, but I want Users to have no access.

Problem 2:
User2 should not have access to the C Drive. I set the permissions using the names of the accounts but I have denied access to set the permissions Even as the Administrator. User2 then cannot click the drive but can type into explorer, "C:\Program Files\" to access the drive.

Problem 3:
I set User2 permissions for E drive as allowing "Read & Execute" "List Folder Contents" and "Read" but then the user can still delete files from the drive. If i set the permissions any lower say I set "List Folder Contents to deny executing applications from the drive no longer works.



I am sorry for a long post but theres just these little problems getting in the way!

I am sure I am just doing something wrong but if anyone can help in this I would be very very grateful!

Thanks!

Dale

 

Hmmm... Messed it all up !!!

Hi
If I assume correctly, then you did those changes logging in as administrator.
Once you do that, then you cannot deny permission to yourself, can you ?
If you would set a deny access permission to a user,logging in as an administrator, then all users including administrators lose the rights !
I suggest that you stop messing with permissions, 'cause in my case, I ended up losing permission to the C:\ drive !!!
I managed to sort it out but it would be better if you use the inbuilt user accounts control, rather than messing with security options.

VISTA is a lot more complex than XP. So b careful !!!

Plz post more so that I can help.

 

Good Idea Evan !!

 

Thanks for the replies, I have tried gpedit.msc but the only thing I could achieve was hiding the drives but you could still access them by typing "C:\" D:\" etc. This also hid the drives for all users. I want to deny permissions to User2 which is a standard user not User1 which is an administrator.

I have been googling this for about 2 days now but I just can't do it.

 

Yes, But I have seen at schools colleges and workplaces that you can restrict users from accessing the C drive.