Privacy on a shared PC.

[Garlic]

I have a HTPC in my living room, and I want to set it up so that I can log on to it and use it for my usual things, such as having my password manager log me into services I use and having personal documents in my document folder etc., while also having a way for guests to boot it up and access my media drive without being able to access my personal stuff. I also have a separate drive that I want to be able to access myself, but don't want to share with my guests. Also, I want to lock down the guest access to the system so that guests cannot install software or make changes to the OS.

 

How would I go about this? Can I set up a user profile with as little access that I want it to have, or would it be safer to dual boot guests into a separate instance of Windows?

[Eigenvektor]

6 minutes ago, Garlic said:

How would I go about this? Can I set up a user profile with as little access that I want it to have, or would it be safer to dual boot guests into a separate instance of Windows?

Users (with no administrative privileges) can't read files of other users. So separate accounts should be sufficient, that's exactly the use case they were created for. Afaik Windows even has a pre-defined guest user role that has additional restrictions like being unable to install software etc.

 

https://www.laptopmag.com/articles/create-guest-account-windows-10

[Garlic]

This is exactly what I need. Thanks!