I have 2 users defined as Administrators in Windows 7 Ultimate. I want to allow them to be able to add/install programs, but not share documents in their My Documents folders. When one Administrator tries to access another Admin's My Documents in Explore, the message "You don’t currently have permanent access to this folder. Click Continue to permanently get access to this folder". When Continue is selected, the contents of all files and folders is available. My security and user settings appear to be normal, but this condition does not appear to be correct in my opinion. Is there a setting that will not allow easy access of files from on Admin to another?

Chris, I am not an expert here, but the way I understand it is that an administrator will always have the capability of taking ownership and accessing files from other user accounts, including other administrators. Administrators need this power to be able to fully control the computer and settings. You may want to look at possibly using a Power Users account, which gives some administrative capabiilities but not others. David-- David Hankins

Hi, You could use Encrypting File System to encrypt your My Document folder, and then other user would have no permission to access the files in this folder. For more information, please kindly refer to the following articles: What is Encrypting File System (EFS)? Back up Encrypting File System (EFS) certificate Hope it helps. Alex ZhaoPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I know this is a delayed response and you might of already fixed your problem but i will tell you a better way rather than encrypting for other people who want to block access as you do. So you right click on your user file in C:\Users then select Properties Click on the Security tab Click Edit Then if you don't see the other users name in the list of users then click Add Then type the User's Name(s) you wish to block then click OK Then find the user name in the list the tick the box next to Full Control under Deny Click OK I have already tested this on the user that i wanted to block permissions for and tried to change permissions and it doesn't let it so this definately works! Sorry if the instructions aren't clear.

Thomas, your advice is completely incorrect because any user with administrator rights (as told in question) can override ownership entry and then delete blocking rule and then get full access to files. Also using EFS is not recommended because: 1. Anyone still can see all file names and subfolder names 2. Files which you open recently can be accessed via low level data recovery tools because cache from EFS is not wiped properly from hard drive. 3. ALL DATA IS STILL ACCESSEBLE VIA ADMINISTRATORS "Data Recovery Agent" (here is the instruction) So the truth is: you cannot do what you want without using third party tools (like TrueCrypt for example).