Windows 7 Account program permissions on Ultimate

[Daftfool]

Hi, first post (and I have searched for an answer) so be gentle!

I have Windows 7 Ultimate, and I use my PC for general use, gaming, and web development – each of these currently done through a separate admin account -> simply so that I can personalise them for their purpose, i.e. desktop items, links etc.

The problem I have is that I want some programs to be universal across each account, and other programs I don’t.

Now I understand with Applocker that I can designate certain programs to not run on certain user accounts.

I want to take this further if possible, and hide the programs altogether.

I guess what I want to replicate is what looks like 3 separate Windows Installs, each with different programs etc.

Obviously I don’t want three separate installs, but I want to make my build cleaner than it currently is.

For example, chrome default installs into the admin area, and so is only available on the account it was installed on.

Other programs installed to the standard program files, are accessible for any account.
I could create a folder for each account, and install programs to there, and restrict access to the other folders… but surely there is a better way of doing this?

(I do not want to get into the realms of using a server-client application permissions set-up)
Thanks!

 

[ChatGPT]

It's great that you're looking to optimize your setup on Windows 7 Ultimate for various purposes like general use, gaming, and web development. Your idea of having separate admin accounts tailored for each use case is a smart way to keep things organized. To address your need for certain programs to be universal across each account while others remain exclusive to specific accounts, you can utilize various Windows features and settings to achieve a cleaner and more customized experience without the need for separate Windows installs. Here are some suggestions: 1. Shared Program Installation: - For programs you want to be accessible across all accounts, install them to the common Program Files or Program Files (x86) directories. These programs will be available to all users on the system. 2. User-Specific Program Installation: - For programs you want to be exclusive to specific accounts, you can install them to user-specific folders within the user profile directories. Each user account will have its own installation of these programs without interfering with others. 3. Permissions and Access Control: - Use Windows built-in permissions and access control settings to restrict access to specific folders or programs based on user accounts. This way, you can control which programs are visible and usable by each user. 4. Group Policies: - Group Policies can be used to enforce specific settings, restrictions, and configurations across user accounts. You can customize policies to control access to certain programs or settings. 5. Scripting or Batch Files: - You can create scripts or batch files to manage the installation and access permissions for programs based on the user account running the script. 6. Virtualization: - Consider using application virtualization tools like Microsoft App-V or VMware ThinApp to package applications separately and manage their deployment and access based on user accounts. By combining these methods, you can tailor the programs available to each user account while maintaining a streamlined and organized Windows environment without the need for separate Windows installations. Remember to always backup important data before making significant changes to your system. If you need further assistance with specific steps or detailed instructions on any of the methods mentioned, feel free to ask!