How do I lock a folder in Win 2K?

[wpenhall]

Hello,

I would like Windows 2000 to ask for a password whenever the user (even an administrator) clicks on a particular folder through either a shortcut or through Windows Explorer. Ideally I'd like this folder to be hidden to everyone but the administrator group, but still require a password whenever it's accessed - even by an administrator. If it isn't possible to hide it, I'd settle for password interrogation for all. I've checked out the permissions options boxes, but I'm still not sure how this really works (I'm new to Win 2k).

Could somebody please give me the step by step procedure for enabling password access this particular folder? Or at least point me to a website that spells it out?

Thanks!

 

[MedicBob]

I think, and I might be wrong, but you can't password protect a certain file from everyone. Your best bet is to hide it, set permissions that only Admin group has total permission, and no one else can do anything, Deny everything.

 

[Nothinman]

You can't password protect folders, you need to use seperate accounts and NTFS ACLs to protect your pr0n.

 

[Yomicron]

Generally limiting the folder to Admins should be enough. How many Admins are on your compuer anyway?


oh, and your sig quote is wrong,

"Those who are willing to trade freedom for security deserve neither freedom nor security."
-BENJAMIN FRANKLIN

should be,

"They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety."
- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

 

[wpenhall]

Thanks everyone for the advice (and thanks for the sig correction, Yomicron - although I will probably change it soon because this makes a lot of sense). The reason I want to do this is because I have several roommates that at various times ask to use my computer. I'd feel like a jerk logging out and then having them log back in as a guest everytime they ask to read their e-mail, but I also have some personal writings and financial stuff that I'd prefer they not "stumble across."

What is an NTFS ACL?

Thanks again.


Edited to add sig reference.

 

[Nothinman]

Well the only way to really do what you want without using seperate accounts is to encrypt the files with a 3rd party tool, like PGP or GPG, which would require the appropriate key and passphrase to be able to read them. Of course if you lose either one the data is gone.

 

[MedicBob]

Set up your roommates with accounts, user account only. Limit there profile size, set local policies, etc. via group policy MMC snap in.

ACL= Access Control List. who can do what list.

 

[igiveup]

WPENHALL: I wouldn't feel bad about making them log in under a seperate account. ITS YOUR DAMN COMPUTER, not theirs. If you want to really get creative you could encrypt the folder that you were wanting to keep them out of, but this won't help you at all either if you don't log them in under another account. The guest account or other accounts is your only option. Like I said though, don't feel bad about it or anything. Its your box.

 

[wpenhall]

Thanks, igiveup. You're right, of course, it is my machine but they usually ask when I'm on it and I just feel awkward to log out / log on as guest while they are standing right there; it's also a real PITA or just not practical to switch accounts sometimes when I'm downloading or defragging in the background. I can deal, but I was just hoping for an easier way.

PGP acually looks good, but the website says the freeware version won't be available until 4Q 02 - which hopefully is still on schedule.

What's the deal with NTFS ACL? Is this something apart from the OS?