Restrict Hard Drive Access for Local Accounts in Windows 10

This guide shows you how to restrict hard drive access for local (non-Microsoft) accounts in Windows 10. You’ll learn to block specific drives or the entire disk using built-in tools like Disk Management and Group Policy, so other users can’t view or modify your files. No third-party software is needed.

What You’ll Need

• An administrator account on the Windows 10 PC.
• The local account you want to restrict (its username).
• If the drive is the system drive (C:), you’ll need to use Group Policy or NTFS permissions, not just hiding.

Step-by-Step

1. Identify the drive letter (e.g., D:, E:) you want to restrict. Open File Explorer and note the letter.
2. Open Disk Management – Right-click the Start button and select “Disk Management.”
3. Hide the drive from File Explorer (optional but quick):
   1. In Disk Management, right-click the target drive (e.g., D:) and choose “Change Drive Letter and Paths.”
   2. Select the drive letter and click “Remove.” Confirm when prompted. This hides the drive from all users, but it remains accessible via command line or by re-adding the letter.
4. Apply NTFS permissions (more secure, blocks access even via command line):
   1. Open File Explorer, right-click the drive (if still visible) and select “Properties.”
   2. Go to the “Security” tab. If you don’t see it, the drive is not NTFS – you’ll need to convert it or use Group Policy instead.
   3. Click “Edit” then “Add.” Type the local account’s username (e.g., “Guest” or “User2”) and click “Check Names.”
   4. Select the added user, then in the “Permissions for …” list, check “Deny” for “Full control” (or just “Read” if you want them to see but not modify). Click “Apply” and “OK.”
   5. If the drive is the system drive (C:), deny only “Full control” and “Write” to avoid breaking Windows – but be careful: denying on C: can cause system instability. Better to use Group Policy for C:.
5. Use Local Group Policy Editor (for system drive or to prevent access via “Run” or command prompt):
   1. Press Win + R, type gpedit.msc, and press Enter. (Note: gpedit.msc is not available on Windows 10 Home.)
   2. Navigate to User Configuration → Administrative Templates → Windows Components → File Explorer.
   3. Double-click “Prevent access to drives from My Computer.”
   4. Select “Enabled,” then choose “Restrict all drives” or a specific drive from the drop-down. Click “OK.”
   5. This restricts access for all users, but you can combine it with NTFS permissions to target only the local account.
6. For Windows 10 Home (no gpedit.msc): Use NTFS permissions as in step 4, or use the Registry method (not recommended for beginners).
7. Test the restriction – Log in with the local account and try to open the drive. It should show “Access is denied” or not appear at all.

Common Mistakes

• Denying permissions on the system drive (C:) – This can cause boot failures or system errors. Avoid denying on C: unless you know exactly what you’re doing.
• Forgetting that hiding a drive doesn’t block access – Users can still type the drive letter in the address bar or use Command Prompt.
• Not applying permissions to subfolders – NTFS permissions on the root drive usually apply to all subfolders, but if you change inheritance, it might not. Check “Replace all child object permissions” when applying.
• Using the wrong account name – The local account might be listed as “Users” or “Authenticated Users.” Use the specific username to avoid locking everyone out.

Tips

• Create a separate local account for the restricted user instead of using the built-in Guest account (which is often disabled).
• Use Disk Management to hide the drive as a quick visual fix, but always back it up with NTFS permissions for actual security.
• If you need to restrict access to just a folder, right-click that folder → Properties → Security → Edit → Add the user → Deny “Full control.”
• Keep a backup of important data before making permission changes – a mistake can lock you out.
• For multiple drives, repeat the steps for each drive or use Group Policy to restrict all drives at once.

Troubleshooting

• “Access is denied” for yourself too – You may have denied permissions for the Administrators group. Log in as another admin or use Safe Mode to revert the changes.
• Drive not showing in Disk Management – Check if the drive is connected and formatted. If it’s an external drive, reconnect it.
• Group Policy changes not taking effect – Run gpupdate /force in Command Prompt as administrator, then restart the PC.
• gpedit.msc not found – You’re on Windows 10 Home. Use the NTFS method instead, or upgrade to Pro.
• Can’t remove drive letter – If the drive is in use, close all programs using it, or restart the PC and try again.
• User can still access via Command Prompt – NTFS permissions should block that. If not, you may have only hidden the drive, not changed permissions. Double-check the Security tab.

Frequently Asked Questions

Can I restrict a drive for a Microsoft account user?

Yes, the same NTFS permission method works for Microsoft accounts, but you need to find the correct user name (the email address). Group Policy also works for all users.

Will restricting a drive affect system performance?

No, it only changes access permissions. The drive remains functional for the admin account.

How do I undo the restriction?

Go back to the Security tab, select the user, and uncheck “Deny” or remove the user from the list. For Group Policy, set it to “Not Configured.”

Is hiding a drive the same as restricting it?

No. Hiding just removes the drive letter, but the drive is still accessible via paths. Restricting with NTFS permissions actually blocks access.

Can I restrict access to a drive for a standard user but allow admin?

Yes. In the Security tab, add the standard user and deny permissions. The admin account (if not denied) will still have access.

What if I don’t have NTFS on my drive?

Most internal drives are NTFS. If it’s FAT32 or exFAT, you can’t set NTFS permissions. You can convert to NTFS (which may erase data) or use Group Policy (if available).

Related

• Track a Lost or Stolen Android Phone
• How to Find Hidden Apps on iPhone or Android
• Disable Suggested Actions in Windows 11