Windows 8 and 8.1 Forums


New User Does Not Appear In Security Tab

  1. #1


    Posts : 7
    Windows 8.1 Pro

    New User Does Not Appear In Security Tab


    I'm far from an expert, but what I'm trying to accomplish is I need to have one User Account that has Administrative rights to access all aspects of the computer (W 8.1 Pro) EXCEPT for two folders. My plan was to create a new Administrative user which I did, and then go to the Properties window of the folder I want to exclude, choose Securites, choose the User I want to exclude and then choose Deny for all permissions for that folder. I thought it would be simple, but unfortunately, this new User Account does not appear under Group Or User Names in the Security Window and I don't understand why. I'm sure it is a simple explanation, but I do not want to aimlessly muck around and screw the whole computer up. I just want to exclude two folders in this manner, and hope someone more knowledgeable can describe how to accomplish this.

      My System SpecsSystem Spec

  2. #2


    Posts : 22,581
    64-bit Windows 10


    Hello slick, and welcome to Eight Forums.

    It would basically be a waste of time to do this since that account has administrator rights. The user could just as easily change the access rights.

    The only way to prevent them from access it to make them a standard user, then deny them read/write access.

    Hope this helps,
    Shawn
      My System SpecsSystem Spec

  3. #3


    Posts : 7
    Windows 8.1 Pro


    Hmm. My problem is that I need to have a software developers log into this machine to do testing and they need access to everything (system level, etc.) but I have two folders of business stuff that I have a duty to protect. I wanted to set them up as a User with Admin. rights so they can access the rest of the machine. It seems strange that with all of the complexity of the system, it is not possible to exclude two folders. I have another User that is set as an Administrator that does show in the list for some reason and the permissions for this User can be set to Deny Access, and after doing that they cannot access the folder. That is what lead me to believe I could do the same for this new User. If I make them a Standard User, I don't think they will have the access they need to test with this computer. I really don't want to go out and buy a new computer to give them access for a day or two of testing.
      My System SpecsSystem Spec

  4. #4


    Posts : 22,581
    64-bit Windows 10


    If you have another hard drive, you could encrypt it with BitLocker and keep the folders on it. This will prevent access by anyone but your account.

    Another option would be to use a free program like 7-Zip to password protect the folders to prevent access by anyone that doesn't know the password.

    How to Use 7-Zip to Encrypt Files and Folders
      My System SpecsSystem Spec

  5. #5


    Posts : 7
    Windows 8.1 Pro


    Thanks for the suggestions but I can't move the folders from my machine because I have to travel with them and it is about 65GB of data that I have to access all the time so zipping probably isn't an option either. If I follow your first suggestion and make the User a Standard User, and then block access to the two folders, how do I go about allowing access to everything else (Programs, all aspects of the System, etc.) for a Standard User? Is this possible? Thanks for you patience--I warned you that I don't really know much about Permissions, etc.!
      My System SpecsSystem Spec

  6. #6


    Posts : 22,581
    64-bit Windows 10


    That really wouldn't be a viable option since it's for everything but two folders. If you were only going to allow access for a few things, it would be a great option.

    I'm not sure of any other easy option to use other than to password protect the folders.
      My System SpecsSystem Spec

  7. #7


    Posts : 7
    Windows 8.1 Pro


    Thank you for all of your help, Shawn. FYI: I finally figured out that I could log into my Main User account (it is set as an Administrator with total control) and get the New User account to appear by clicking on Edit below the Group or User Names box in the Security tab of the Properties window for the Folder that I wanted to lock out. I then clicked on Add... and then entered the New User name in the Enter The Object Name To Select Box, clicked Check Names and then clicked OK after the New User name appeared in the box. This added the New User to the Security Tabs Group Or User Names list and then I selected this New User name and set the Permissions to Deny for everything listed (all of this was done from the Main User account using the Security Tab of the Properties window for the Folder that I wanted to lock out). It seems to have worked, because I still have access to everything from my main Administrative account (I hope!), and the New User account has access to everything except the folder I wanted locked out (in my case I did this for two folders). If you try to access those folders from the New User account you keep getting access denied errors so I suppose it is enough of a barrier that it would take some work to get in. I don't really know enough to understand if there is a method around this (there may be), but at least it would take some work to get in. My assumption is that because I set this up in the Main User account and I won't be sharing that account's login info with the people who will be logging into the New User account, it may be difficult. Am I right, or is this just wishful thinking? At least it makes me feel a little better that it has a bit of a barrier.
      My System SpecsSystem Spec

  8. #8


    Posts : 22,581
    64-bit Windows 10


    While you have added the new account and denied access, the new account will still be able to change these settings as well to give themselves access if they wanted since it is an administrator account.

    If you like, here's some more information below about permissions.

    Permissions - Allow or Deny Access to Users and Groups in Windows 8
      My System SpecsSystem Spec

  9. #9


    Trying to restrict an admin account with permissions is an exercise in futility. Any permissions you may remove or deny can easily be taken back. This right cannot be denied any admin account. It is really quite simple to do with instructions to be found all over the Internet. This is by design and a fundamental aspect of the Windows security model.

    You need to find some other solution to your problem.
      My System SpecsSystem Spec

  10. #10


    Posts : 7
    Windows 8.1 Pro


    As usual, a good plan is thwarted by Microsoft! What I envisioned was an Administrator not being able to change the action of another Administrator without access to the originating Administrators account. Guess not. It wish there was the ability to have a "Super" Administrator that could have a level of control over all other Administrators...it seems this would open up more options for controlling access. So if I am understanding correctly, the locked out Administrator could gain access by taking Ownership of the folder? If that is the case, that is the part I didn't understand was possible.

    As for other options, Bitlocker was mentioned. I read up a little about Bitlocker yesterday and it appears that it has the capability of encrypting an individual partition (Data Partition), which would work for us as long as the separate System partition is unaffected (I am partitioned into a System and a Data Partition). If this is true, does the Bitlocker encryption stay in place if a User other than the User that set it up logs on? In other words, if I log on with my Main User account and apply Bitlocker to just the Data Partition (leaving the System Partition unencrypted), will the New User unlock the Bitlocker encryption when they log in, or will the encryption protect my Data Partition from them while still allowing them access to all of the Programs, System Files, etc.?

    I know my ignorance of all of these issues is probably frustrating (it is for me!) but I greatly appreciate all of the advice...and I'm learning a bit in the process.
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
New User Does Not Appear In Security Tab
Related Threads
New user cannot login (user profile service failed) in User Accounts and Family Safety
I am trying to add a second account to my machine and whether I try a Local or Microsoft account, I get the same "User Profile Service failed the sign-in. User profile cannot be loaded" error every time I try to sign in for the first time. I've Googled this a bit and it seems everything I've found...
I need to add another standard user. I have one admin account and one standard user. After adding the second standard account name and password on Control Panel I get the confirmation that the new user can now sign in. However,I get this famous message that the profile service cannot open. ...
My grandmother was recently hacked and she changed all her passwords herself (yay!):thumb:. However she did not write down her new local user account password for her laptop. I tried downloading OPHCrack, I burned it as an ISO file and put it on a DVD-R(only thing I had on hand) and i changed...
Hi! IŽd like to get some information about how to, in Windows (8.1): Change the Local Security Policy Open Local Security Policy: XP: From the Start menu choose Run. In the resulting dialog, type "secpol.msc" (without quotes) and click OK. Vista: From the Start menu, in the...
Hi guys. Windows 8 screwed up my old user account so I had to transfer to a new one. Unfortunately that new one was named after my email address for some reason as I logged on as a microsoft account rather than a local one. Hence in my computer its called users/email_000 This is very...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook