How to Secure OneDrive Folders from Other Windows Users
Question details
The user needs to prevent other local Windows users from viewing or accessing personal OneDrive folders stored on a shared computer or external drive.

- Product
- OneDrive
- Device & OS
- Windows
- Scenario
- Sharing a computer with multiple users while attempting to maintain isolated, private access to personal OneDrive files stored on a secondary drive.
- Observed behavior
- OneDrive folders located on shared or secondary drives are openly accessible to other users on the same computer due to broad default Windows folder permissions.
Ensure you are logged into Windows with an Administrator account so you have the necessary privileges to modify folder security permissions and manage user accounts.
Modify Windows Folder Security Permissions
Restrict folder access exclusively to the system, administrators, and your specific Windows user profile.
When you move a OneDrive folder to a secondary drive, it often inherits the broad security permissions of that drive. Manually restricting these permissions ensures that only authorized accounts can open the folder.
Open File Explorer, right-click on your designated OneDrive folder, and select 'Properties' from the context menu.
Navigate to the 'Security' tab and click on the 'Advanced' button near the bottom of the window.
Click 'Disable inheritance' and choose the option to remove all inherited permissions from this object.
Click 'Add', then 'Select a principal'. Type 'SYSTEM', 'Administrators', and your specific Windows profile name or Microsoft email. Grant them 'Full control'.
Check the box for 'Replace all child object permission entries with inheritable permission entries from this object', click 'Apply', and then 'OK'.

Set Up Separate Windows User Accounts
Isolate user environments so each person has their own private file directory and OneDrive instance.
Enable OneDrive Personal Vault
Secure highly sensitive files using built-in encryption and two-factor authentication.
Manage and Protect Your Documents with WPS Office
While configuring your Windows folder permissions to secure your OneDrive files, consider switching to WPS Office for your document needs. It offers a lightweight, highly compatible alternative to Microsoft Office with robust built-in features for document security and encryption.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button to get the setup file.
- 2. Install WPS Office: Run the downloaded installer and follow the quick on-screen instructions to set up the software on your Windows PC.
- 3. Secure Your Documents: Open WPS Office, create or import your documents, and use the 'Encrypt' feature under the 'Menu' tab to add password protection to individual files.

Frequently Asked Questions
Does changing Windows folder permissions affect my ability to share OneDrive files online?
No. Changing your local Windows folder permissions only restricts file access for other people using the same physical computer. Your cloud-sharing links and external OneDrive permissions remain unchanged and will function normally.
Can other computer administrators still see my restricted files?
Yes. Any user who has Administrator privileges on the Windows PC can technically alter folder permissions to grant themselves access. To completely secure files from other administrators, use OneDrive Personal Vault or third-party cloud-encryption software.
Why did my OneDrive folder become visible to others when I moved it to the D: or F: drive?
When you move a folder to a secondary or external drive, it typically inherits the default security permissions of that specific drive, which often grants read access to all 'Authenticated Users'. You must manually restrict these permissions after moving the folder.




