{{indexmenu_n>140}}

{{anchor:articles_accesscontrol}}

====== Partition/File access control for users ======

<font 20px/inherit;;inherit;;inherit>**Method 1 - Hide Partitions**</font>

If you want to hide partitions from other users so they cannot access them from the Windows explorer then follow the steps below.

<note>The Local Group Policy can help you hide drive icons from Windows Explorer. You can still access the data by typing the drive path on the File Explorer address bar. </note>

  - Press the **Windows + R **shortcut to open the Run command window.
  - Input gpedit.msc and click OK start Local Group Policy Editor.

{{  ..:..:..:accesscontrol_1.png?nolink&399x207  |Strart Local Group Policy Editor}}3. Expand **User Configuration**  > **Administrative Templates **> **Windows Components**. \\
4. Under the Windows Components section, double-click **the File Explorer**. \\
5. Go to the right panel, click the **Standard**  button. \\
6. Scroll down to find **Hide these specified drives in My Computer**  and double-click it.

{{  ..:..:..:accesscontrol_2.png?nolink&700x422  |Local Group Policy Editor}}7. Click on **Enabled**. \\
8. Under the **Options **part, select the drive you want to restrict or select **Restrict all drives.** \\
9. Click **Apply**  and click** OK.**

**{{  ..:..:..:accesscontrol_3.png?nolink&686x637  |Choose Drivers}}**<note>If you want to show the hidden drives, change the “Hide these specified drives in My Computer” to “Not configured”.</note>

<font 20px/inherit;;inherit;;inherit>**Method 2 - Control access to folder specified user**</font>

<font 14px/inherit;;inherit;;inherit>For this I have created 2 folders with the username of the users for each workplace:</font>

<font 14px/inherit;;inherit;;inherit>rabistha is a folder for 1st workplace user.</font>

<font 14px/inherit;;inherit;;inherit>saritastha is a folder for 2nd workplace user.</font>

<font 14px/inherit;;inherit;;inherit>Note: Users can be admin or standard user accounts.</font>

1. Open the properties for the folder. \\ {{  ..:..:..:accesscontrol_5.png?nolink&373x486  |Properties}}2. Then, click on the **“Security”**  tab.

{{  ..:..:..:accesscontrol_6.png?nolink&307x400  |Security Tab}}3. Click on the **“Edit”**  button.

{{  ..:..:..:accesscontrol_7.png?nolink&373x486  |Edit Button}}4. Click on the **“Add”**  button

{{  ..:..:..:accesscontrol_8.png?nolink&373x455  |Add button}}5. Click on the **“Advanced…”**  button

{{  ..:..:..:accesscontrol_9.png?nolink&458x252  |Advanced button}}6. Click on the **“Find Now”**  button

{{  ..:..:..:accesscontrol_10.png?nolink&445x500  |Find now Button}}7. From the **“Search results”**  list, choose the user account which you want to allow access to the folder to and then click the **“OK”**  button.

{{  ..:..:..:accesscontrol_11.png?nolink&515x579  |Select User Account}}8. You will see the user listed on the **“Select Users or Groups”**  window, click the **“OK”**  button to continue.

{{  ..:..:..:accesscontrol_12.png?nolink&458x252  |Check the user}}9. Click the added user account from the list and then check the “Full Control” checkbox under “Allow”, then click the “OK” button

{{  ..:..:..:accesscontrol_13.png?nolink&373x455  |Full Control chekbox}}10. Now the user account ‘rabistha’ has full access to the “rabistha” folder and can read/open, create or delete files and folders in that folder.

11. Do the same for the 2nd folder, just difference is to choose the user account of the 2nd workplace in step 7.

<note>In order to restrict access to the folder, follow the step 1 to 8. Then, on step 9 check the checkbox for **“Full control”**  under **“Deny”**instead of **“Allow”**</note>

{{  ..:..:..:accesscontrol_14.png?nolink&373x455  |Permissions}}Now, when the user account “rabistha” tries to access the folder, it will not be able to open it or delete that folder.

{{  ..:..:..:accesscontrol_15.png?nolink&764x516  |Access denied}}The user ‘rabistha’ even with Administrator privilege can't access, change or delete folder “rabistha”

{{  ..:..:..:accesscontrol_16.png?nolink&764x516  |Сhange or delete folder}}

Or when trying to delete the folder, it will not allow it to be deleted.

This way you can allow or restrict access to certain folders, so other users on the system have access or no access to it. This is especially useful for teachers/administrators who do not want to allow access to certain folders in the system to other users/students using the ASTER workplaces. \\