XP pro Users

Windows XP Pro
Three partitions C:, D: and E:

Initial user account set up as administrator with password.
added files to Win XP

Added limited user account with password.
The limited user can see files of administrator even though the
instructions said the limited user would not see the administrator files.

How do I keep files away from other users?

Is there anything to do other than encryption?

Does it matter where files are placed?

If I use encryption for the administrator files, does that use the
administrator login password?

If I make this a dual boot with Win 7 how does all of this then work?

On 18/07/2017 22:23, NewUser wrote:


Initial user account set up as administrator with password.
added files to Win XP

Added limited user account with password.
The limited user can see files of administrator even though the
instructions said the limited user would not see the administrator files.



Login again as Administrator and check whether the local Limited Account
is not set as Administrator by mistake. I think this is what used to
happen in XP. You need to change the Account type.




--
With over 500 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.

On Tue, 18 Jul 2017 14:23:48 -0700, NewUser wrote:
Windows XP Pro
Three partitions C:, D: and E:

Initial user account set up as administrator with password.
added files to Win XP

Added limited user account with password.
The limited user can see files of administrator even though the
instructions said the limited user would not see the administrator files.

What it meant is the Administrator user profile's files. Not files which
require administrator rights.

How do I keep files away from other users?

You can do that by modifying the NTFS permissions. To prevent
user(s)/group(s) from seeing the contents of a folder, change the NTFS
permission for that folder. Individual files can not be made invisible for a
specific user(s)/group(s), but you can still prevent the files' contents
from being read/executed.

Is there anything to do other than encryption?

No. Encryption is mainly to hide the unscrambled data from other
users/groups. It doesn't prevent other users/groups from reading the data
itself.

Does it matter where files are placed?

No. However, if the containing folder has its Encryption attribute set by
default, any newly created files will be encrypted automatically. Also, boot
files such as NTLDR and BOOT.INI in the root folder of the system drive must
not be encrypted or compressed, otherwise the OS won't be bootable.

If I use encryption for the administrator files, does that use the
administrator login password?

No. It uses the user's login token instead of password (which is stored in
memory). i.e. the OS won't prompt the user for a password in order to read
an NTFS encrypted files. A user will need to login first, in order to read
his/her encrypted files.

If I make this a dual boot with Win 7 how does all of this then work?

A local user account named e.g. "john" in two separate installations of
Windows (no matter what versions) would be treated as two different users
because they are local user accounts. Meaning that each Windows installation
has their own database of local user accounts. So, john's encrypted files in
one Windows installation aren't readable using john account from the other
Windows installation.

You'll need to manually recreate a user account with the same SID in the
other Windows installation (i.e. same SID and account name), in order to
"import" a user account (excluding the user's files in the profile folder).
I'm pretty sure there's a tool for this specific purpose in the net, but I
haven't tried to search for it. Windows also have a user migration tool, but
AFAIK (I could be wrong) it doesn't duplicate the user acount's SID.