Windows 8 security user account permissions

07
2014-07
  • juFo

    I'm using Windows 8 Pro. When I try to save an attachment from Outlook 2010 into a specific Program Files folder I get the following message:

    "C:\Program Files (x86)... You don't have permission to save in this location. Contact the administrator to obtain permission.

    Would you like to save in the folder instead?"

    I upgraded my Win7 pc to Win8. The first time I used Windows 8 I signed in via my email address (4 or 5?). But then I added it to our domain and signed in with my domain account (3).

    Now when I look at the "Control Panel > User Accounts > User Accounts" I see the following things:

    (1) HomeGroupUser$ | <pcname> | HomeUsers
(2) UpdateusUser | <pcname> | HomeUsers
(3) <my current domain user (globe icon)> | <my domain> | HomeUsers; Administrators 
(4) <my first sign in user email address (pc icon)> | MicrosoftAccount | HomeUsers; Administrators 
(5) <my first sign in user email address (globe icon)> | MicrosoftAccount | Administrators

    the "my domain user (globe icon)" (3) is the account that I use currently and It has been added to the "HomeUsers; Administrators" groups, but still that message tells me i'm not an administrator.

    I also linked my MicrosoftAccount (4 or 5?) with my current domain user account (3)

    Any suggestions on how to make myself an administrator on the pc so that I don't have these annoying UAC messages and that I can write in my own program files (and other folders)? I thought I was an administrator now, because my domain account (3) is in the groups "HomeUsers; Administrators" but that doesn't seem to be 100% ok.

    Thanks in advance (sorry if this explanation is a bit messy).

    • Answers
  • William Hilsum

    You are still an administrator - The exact same thing happens in Windows Vista and Windows 7... Unless you launch Outlook as an administrator, you will not have the ability to save to or write to protected paths.


    • Related Question

    permissions - Prevent Windows 7 User Accounts from accessing files in other User Accounts
  • Mantis

    I'm trying to set up another User Account on my Windows 7 Professional laptop for use by another person. I do not want that person to have access to any of the files in my User Account on the same machine. This machine has a single hard disk formatted with NTFS. User accounts data is stored in the default location, C:\Users.

    I use the computer with a Standard Account (not an Administrator). Let's call my user account "User A."

    I have given the new user a Standard Account. Let's call the new user's account "User B."

    To be clear, I want User B to have the ability to log in to her account, to use the computer, but to be unable to access any of the files in the User A account on the same machine.

    Currently, User B cannot use Windows Explorer to navigate to the location C:\Users\User A. However, by simply using Windows Search, User B can easily find and open documents saved in C:\Users\User A\Documents. After opening a document, that document's full path appears in "Recent Places" in Windows Explorer, and the document appears as a file that can be opened using the "Recent" feature in Word 2010. This is not the desired behavior. User B should not have the ability to see any documents using Windows Search or anything else.

    I have attempted to set permissions using the following procedure.

    1. Using an Administrator account, navigate to C:\Users and right-click on the "User A" folder. Select "Properties."

    2. In the "User A Properties" window that appears, click the "Security" tab.

    3. Click the "Edit..." button to change permissions.

    4. IN the "Permissions for User B" window that appears, under "Group or User Names," select User B.

    5. Under "Permissions for User B", check the box under the "Deny" column for the "Full Control" row. Ensure that the "Deny" box is automatically checked for all the other rows, and then click "OK."

    The system should then begin working. The process could take several minutes.

    When I followed this procedure, I received several "Access Denied" errors, suggesting that the system was unable to set the permissions as I had directed. I think this might be one of the reasons why User B is still able to access files in User A's account folders.

    Is there any other way I could accomplish my goal here? Thank you.


    • Related Answers
  • Mantis

    I solved this problem by slightly changing the procedure I outlined in the question. Basically, instead of clicking "Deny" under "Full Control," I individually selected each permission I wanted to deny. I'm not sure why this works, but it does.

    First, I deleted User B and recreated User B, to clear up any confusing and contradictory permissions. Then, I followed this modified procedure.

    1. Using an Administrator account, navigate to C:\Users and right-click on the "User A" folder. Select "Properties."

    2. In the "User A Properties" window that appears, click the "Security" tab.

    3. Click the "Edit..." button to change permissions.

    4. I the "Permissions for User B" window that appears, under "Group or User Names," select User B.

    5. Under "Permissions for User B", check the box under the "Deny" column for the "Read & Execute," "Modify," "List Folder Contents," "Read," and "Write" rows. Click "OK."

    The system should then begin working. The process could take several minutes.