Dear all, I tried to set up user permissions to share a partition with my main user account (administrative rights, use only for system operations) and with a limited account (primarily use for access to Internet and work). My intention was to allow Full Control to both on my Data-partition. Initially the setup was ok, just that any files created by my Computer Administrator account could not be shifted (when tidying up my folders) by my limited account.
Now I am left with Full Control of my Computer Administrator account, when I am logged in there. I have added the limited account to the User names section in the Security tab for the partition, and given Full Control. In Advanced it tells me: "Apply to: This folder, subfolders and files", which is the same as for the Computer Administrator account, and should be ok.
However, logged in on the limited account, I can view the subfolders of the partition but for their content I get an "Access denied" message. Whatever I did wrong with playing with the "Replace Permission on all child objects..." I now just want to get back to the original setting, which was cumbersome, but worked.
I thought of two options:
1) Change the limited account to a Computer Administrator account, and after a restart back to a limited account.
2) Create another limited account and shift or access the data, then delete the old limited account.
Whilst the latter might be the "easier" option, could someone explain, whether the first option would work, or wether the second option might not work.
Thanks very much in anticipation.
ainstein
Archiv Windows XP 25.916 Themen, 128.567 Beiträge
Thanks for your suggestion.
In the mean time ... I gave the ltd account Full Control in the Share permissions, after removing the Everyone. This however, didn't seem to make a difference.
I also created a second ltd account and added it in Security and Shared Permissions and gave Full Control, however this time without checking the tick box at "Apply these permissions to objects and/or containers within this container only" in Advanced Security / edit Special Permissions. I also did not tick the "Replace Permission on all child objects with entries shown here that apply to child objects." in the Advanced Security Settings.
Don't know how and why, but I now can access the folder that I needed in the 1st limited account.
To explain: although I would have preferred to have FC on the whole partition, the most important folder was "My Documents" to be accessed from both accounts and the data folder for my Thunderbird email account.
Interestingly throughout the whole trouble not being able to access any others than the folders in the root of the partition, I could download my emails to the Thunderbird folder structure within the limited account.
In any case, I'm still somewhat and end-user (i.e. as long as it works, it's fine by me), therefore:
Thanks very much to all who provided help and thoughts for my problem.
ainstein