Control Root Folder access in Windows 10

Question

_{Monday, June 17, 2019 3:12 PM}

What is the best way for allowing users to have write access on C:\

We want to control where users can create folders on C:\ so that they cannot write at the root of C: 

This will possibly keep c:\ clean on root level 

Our aim is to have a folder lick C:\UserFolder   at the root of C:  and give users who logon to machine write access to c:\UserFolder\username%

This will allow users only to write to their folder and not anywhere else on the c:\

Any suggestions 

All replies (5)

_{Tuesday, June 18, 2019 6:03 AM}

Hi, 

I think the two policies "Hide these specified drives in My Computer" and "Prevent access to drives from My Computer" might be fit for you.

There is a similar thread might be useful for you.

How to block user access to C drive, but still allow them access to their local user profile?

Note: This is a third-party link and we do not have any guarantees on this website. And Microsoft does not make any guarantees about the content.

Bests,

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, June 19, 2019 9:29 AM}

Not hiding as such.

We want to prevent users from creating any folder on C: root 

They should have write access only to C:\UserFol\username%  folder  and not at C:\

_{Friday, June 21, 2019 7:03 AM}

Hi,

We quite understand your existing mode. 

However, if your user can create folders on C drive, so they must have read and write permission of C drive. If you want to disable write at root of C drive, they must be disabled to create folder on C drive. There is not a measure to complete the conflicting action through official measure.

As folder privilege is inherited, if user was denied to write at root folder, it will not able to modify subfolder any more. 

So according to my know, it is not available to achieve your desire through official measure.

Bests, 

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, June 26, 2019 8:35 PM}

Use the security tab on the actual Drive just make sure you check all the squares when you change it you may also have to Disinherit any accounts and Re-Inherit the actual account you leave as permissions on the drive

_{Monday, July 1, 2019 5:59 PM}

https://enterinit.com/guide-create-file-system-security-gpo-in-windows-server-2016/

 something like this , does anyone use this any feedback on the policy

it is exactly wat i need