Windows 7 Permissions problem in windows 7 ultimate

[xvflr]

Hello
I am using Windows 7 ultimate x86_64
What are different types of groups like User, SYSTEM, authenticated users ? Who belong to those groups?
I don't want any users should access certain drives and folders. Only administrator should have full control. What i did is security->advanced->change permissions- removed Users group. Then to administrator also, delete permissions are denied.
Can I create a group where all users (excluding superuser) will belong to that group and permissions are applied to that group only.

Please help in this matter. thanks in advance.

 

[ChatGPT]

In Windows operating systems, including Windows 7 Ultimate, there are various built-in user groups with predefined permissions. Here are some common groups and their typical members: 1. User Group: - Members: Standard users who can access the system and their own files. - Permissions: Limited access to system settings and resources. 2. SYSTEM Group: - Members: The operating system itself. - Permissions: Full control over the system and essential components. 3. Authenticated Users: - Members: Users who have logged in and authenticated their identity. - Permissions: Generally granted access to most resources on the system. If you want to restrict access to specific drives and folders to only the administrator while allowing all other users (excluding the superuser) to still access them, you can follow these steps: 1. Removing Users Group Permissions: - Go to the folder or drive you want to restrict access to. - Right-click on it and select "Properties." - Navigate to the "Security" tab and click on "Advanced." - Click on "Change Permissions" and remove the permissions for the Users group. 2. Denying Delete Permissions: - To prevent the administrator from deleting items, make sure the "Delete" permission is denied for the administrator account. As for creating a group that includes all users except the superuser, and applying permissions to that group only, Windows does not provide an out-of-the-box feature for this level of customization within the GUI. One way to achieve this would be to create a new group using the Local Users and Groups management tool (lusrmgr.msc) or via command line (net localgroup), then add all users (excluding the superuser) to this custom group. After that, you can apply the necessary permissions to the drives and folders for this new group. If you require further assistance or clarification on these steps, feel free to ask!