Users Access to C:

Posted on 2009-12-30
Last Modified: 2012-05-08
Currently I have setup each user to be a local admin for their computers...and that allows them to do whatever they want on the c:.

Is that a wise thing to do?

Please suggest whats best.
Question by:Shivtek
    LVL 1

    Author Comment

    Can I give limited access to c:?
    LVL 8

    Accepted Solution

    You could set them as power users or

    you could change them to be just users and set the permissions you want them to have on C:\ and then change permissions on the top level folders on C: that they should have full access to such as giving them limited access to the root of C and the Windows directory, but full rights and access to Docs/settings, Temp, etc.

    Personally, if you're domain permissions are correct and in check with the needs of the company, I like to leave the users as local admins.  It lets them install / remove items without needing to call IT, prevents goofy errors from ocurring due to permissions (XP doesn't always give the best error messages), and it will allow you to troubleshoot issues with them via phone calls and remotely without logging them off to get into what you need.

    As long as you have their user accounts properly assigned and permissioned up, local admin rights shouldn't hurt you at all.
    LVL 9

    Assisted Solution

    Well, there are some things you can do, but there are always trade-offs.

    If you give them local admin rights to their computer, they will have unlimited access to C:. There may be things that you can do to *kind of* lock it up for an average computer user, but with full admin rights, any person can figure a way around it.

    So I'd suggest before giving them full admin rights, ask why it is needed. Many times its because some software app requires admin access to work properly.  If it is because of software problems, then try tinkering with that app...Sometimes the app only needs admin access to SPECIFIC folders, like the folder it writes information to, or the directory of the application files.

    You could play around with that. Set the user with typical user level rights, then browse to the specific folders and give the user full permissions to set of files and folders.

    If the requirement is more complicated and full admin rights is completely necessary, the only thing that you can do is strengthen and enforce your policies.  That is, make sure everyone understands the rules on computer use and the penalties for non-compliance. And ensure penalties are enforced consistently.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    It is a known fact that servers reach the end of their lives. Some get there quicker than others, based on age, manufacturer, usage and several other factors. However, if your organization has spent time deploying Microsoft's Active Directory server…
    So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now