📎 AI Summary:
The thread discusses how to set up a Windows 10 PC with two Microsoft Account users—an administrator and a standard user—while keeping their folders separate. The original poster encounters permission errors when trying to restrict the standard user's access to the admin's folders and seeks guidance. An experienced user explains that errors are expected when removing access via folder permissions and provides a command-line method to remove the standard user's permissions, emphasizing that the errors do not indicate a problem.

SavorySilicon

Senior Member
Member details
Joined
Jan 28, 2020
Messages
120
Thread Author #1
Hello there everyone. I would like to have 2 Microsoft Account based users on my Windows 10 PC. 1 Administrator, and 1 Standard user. I do not want the Standard user to see any of the Admin user's folders, their desktop, photos, and anything. I want them to each use the same applications. What is the best way to set this up? All of the people using this PC will be adults, so I am not seeking a child filter or family filter settings. Thanks for your help everyone!
 

Solution
As an example your admin username is MyAdmin and the account your trying to remove is MyStandardUser.
[Opening an elevated command prompt]
  • Click the Start button
  • Type cmd
  • Right click 'Command Prompt' and select 'run as administrator'
You can open an elevated command and run the following.
icacls C:\Users\MyAdmin /t /c /q /remove:g MyStandardUser

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
No changes would be required. Only a user has access to their user folder (for standard users). Administrators can access any folder if they need to.
 

SavorySilicon

Senior Member
Member details
Joined
Jan 28, 2020
Messages
120
Thread Author #3
I must have accidentally given the standard user permission to see the administrator's user folder. How do I reverse that without causing any problems. I have seen you on this site many times, you are a helpful and nice person. Why the dark portrait?
 

Last edited:

WindowsPro

Extraordinary Member
Member details
Joined
May 19, 2017
Messages
137
I must have accidentally given the standard user permission to see the administrator's user folder. How do I reverse that without causing any problems. I have seen you on this site many times, you are a helpful and nice person. Why the dark portrait?
If you sign in as Administrator, open file explorer go to: c:\Users
Right click on the Administrators profilefolder, select: Properties
And Security... via Edit, you simply REMOVE the user... (If asked: Opt to remove from all subfolders..)
 

SavorySilicon

Senior Member
Member details
Joined
Jan 28, 2020
Messages
120
Thread Author #5
I logged in as Admin, went to C: drive > Users > <Admin name> > and followed your instructions.

"An error occured while apply security information to C:\users\...\appdata\local\application data.
Failed to enumerate objects in the container. Access is denied.

It gave me this error a huge number of times. When I tried to cancel, it told me canceling can cause inconsistant results. What went wrong?
 

WindowsPro

Extraordinary Member
Member details
Joined
May 19, 2017
Messages
137
I logged in as Admin, went to C: drive > Users > <Admin name> > and followed your instructions.

"An error occured while apply security information to C:\users\...\appdata\local\application data.
Failed to enumerate objects in the container. Access is denied.

It gave me this error a huge number of times. When I tried to cancel, it told me canceling can cause inconsistant results. What went wrong?
Nothing went wrong! That is expected...
 

SavorySilicon

Senior Member
Member details
Joined
Jan 28, 2020
Messages
120
Thread Author #7
I wonder if an expert on this site knows why the above instructions resulted in errors.
 

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
As an example your admin username is MyAdmin and the account your trying to remove is MyStandardUser.
[Opening an elevated command prompt]
  • Click the Start button
  • Type cmd
  • Right click 'Command Prompt' and select 'run as administrator'
You can open an elevated command and run the following.
icacls C:\Users\MyAdmin /t /c /q /remove:g MyStandardUser
 

Solution