How to Set up a custom user account

Lakshay Jindal 0 Reputation points
2024-04-02T03:19:58.0766667+00:00

Hi,
I don't know if it is possible or not but I want to set up a user account such that the user

  1. Access all the programs
  2. Can't delete any file/folder
  3. can't uninstall any program
  4. create files and folders
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,636 questions
Windows 10 Setup
Windows 10 Setup
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
1,906 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Yanhong Liu 2,005 Reputation points Microsoft Vendor
    2024-04-02T07:40:44.3+00:00

    Hello

    In Windows 10, you can achieve what you describe by creating a standard user account and setting the appropriate permissions on it.

    1. Create a standard user account: Open settings, go to accounts, go to other users, enter the username of the new user, set a password and password question. In "Account Type", select "Standard User" and click "Next" to complete the account creation. Create a local user or administrator account in Windows - Microsoft Support
    2. Restrict file deletion permission: Select "Properties" on the file or folder that needs to be protected, and switch to the "Security" tab. Click the "Advanced" button to enter the "Advanced Security Settings" window. Click the "Change Permissions" button and then click "Add." Enter the name of the newly created restricted user account and click "OK". To set permissions for the newly added user, you usually only need to check "Read" and "List Folder Contents", uncheck "Write", "Delete" and other permissions, and then click "OK".
    3. Restrict program uninstall permission: Press the Win + R keys to open the "Run" dialog box, enter gpedit.msc and press Enter to open the "Local Group Policy Editor". Navigate to User Configuration > Administrative Templates > System. Find and double-click "Don't run specified Windows applications", set it to "Enabled", and the "Show" button will become active. Click the "Show" button and in the "Value" text box, enter the name of the application's uninstaller. The most common ones are: uninstall.exe, unin.exe, uninstaller.exe, uninst.exe.

    Best Regards,

    Yanhong Liu

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments