Windows security for different user types

[Lizabella]

I am using Windows 8.1. Right-clicking on my drive C, where I install windows, and choosing properties shows me the security tab. I see some groups and users that have privileges to use the drive. What if I delete all of them and add only my own username in there ? For instance, can I still boot the computer in save mode ? Thank you. :)

 

[Psinter]

If you for instance remove the SYSTEM user group, services running in the context of SYSTEM (real name is LocalSystem, "SYSTEM" is just a token within the LocalSystem account) may misbehave.

I have no idea if it will boot in safe mode. It should. Just that whatever it is that runs under the token SYSTEM in safe mode, will simply not work or may misbehave.

If you search, you will find in other forums that some have removed this user group and had no problem whatsoever with their system. At least not visible. I'm sure something broke, but they say it was fine.

Sources:
https://msdn.microsoft.com/en-us/library/windows/desktop/ms684190(v=vs.85).aspx
https://msdn.microsoft.com/en-us/library/windows/desktop/aa379624(v=vs.85).aspx

 

[Lizabella]

I have an anoying nephew who always messes up all stuff in my computer when I am not at home. I don't want him to access to read or store files into my data drives (D or E). Even though I have a local account set up as an administrator user, usually other accounts with similar privileges can still see and access these 2 drives. I now use bit lockers to encrypt both and also I delete all users except me and System as seen in the security tab.

 

[Psinter]

I see. In any case you can alternatively try creating a standard account for your nephew. Then, go to one of the drives (say D), right click it and in the Security tab set the permissions for your nephew's account to Read & Execute, List folder contents, and Read. Leave it out of other permissions. Do that with each data drive you don't want your nephew messing around and it should be okay.

At least in theory.