Windows 7 Win7 second-user (account) permissions trouble

To restrict a user account in Windows 7 from accessing certain areas while allowing essential operations like writing temporary files, you need to fine-tune the permissions. Here's a step-by-step guide on how you can achieve this: 1. Grant Limited Access to the User Account: - Remove the explicit deny permissions on the C:\ drive that block access. Instead, you can restrict access by only allowing specific permissions. - Go to C:\ drive properties > Security tab > Advanced Settings > Change Permissions. - Add the user account (SecondUser) and grant the following permissions: - Traverse folder / execute file - List folder / read data - Create files / write data - Create folders / append data - Modify (optional, depending on the user's requirements) 2. Modify Permission Inheritance: - Ensure that you apply these permissions only to the specific folder and that the subfolders don't inherit these restrictions, which may cause issues with temporary files. 3. Deal with Temporary Files Location: - Some applications need access to the system drive for temporary files. You can redirect these temporary files to a location where the user has write access. This can be done by modifying environmental variables. - Right-click on Computer > Properties > Advanced system settings > Environment Variables. - Edit the TEMP and TMP variables for the user account to point to a location within the user's profile directory where they have write permissions. 4. Testing: - After making these changes, test the access for the SecondUser account by copying files to the desktop or using Office applications. Ensure that temporary files are being written without any issues. By following these steps, you can restrict access to certain areas while allowing essential operations like writing temporary files. Remember to test thoroughly to ensure that the user can perform required tasks without any hindrance. If you encounter any issues during the process, feel free to ask for further assistance!