Restricting access to the C:\?

Question

Programming

Task:

• Create a user with access to one folder on the D:/nUser drive.
  
• Provide access to installed programs for work.
  
• Close access to the C: / drive.
  

Completed:

• I closed access to the C: / drive, through the "group policy" (gpedit.msc), the problem is that access was closed to me as an administrator, can I fix this without opening access back? I also noticed that Total Commander ignores restrictions
  
• Access to folders was limited through the "Folder Options" / security. The problem is that for each folder separately, and each folder had to create a user. It's a chore, is it possible to do this somehow differently and more competently?

Maybe someone knows high-quality programs for organizing limited access?
Thank you very much in advance )

Answer 1

Access to folders was limited through the "Folder Options" / security. The problem is that for each folder separately, and each folder had to create a user. It's a chore, is it possible to do this somehow differently and more competently?

If you have NTFS there, then access is closed once - at the root C:, D:
Only you need to specify that the ban is distributed recursively.
And then resolves once to D:/username

Answer 2

I know. Not very good quality, really. The operating system is called Windows :) Access to c:\ is closed through local security, recursively. Access to D:\ is exactly the same. Then access to the desired folder is given. True, you may have to give write access to the program directories - of course, they should be able to work only if there is an entry in the user profile, but ... they may not work.

Answer 3

if you completely block access to the disk on which the operating system files are located, the user will not be able to work

Answer 4

User - user rights, this will not allow him to create folders / files on the system partition, etc. and copying from any folder will not give anything without the appropriate rights.
On the D:\ drive, disable everything, and then allow a specific folder.