Is there a way to resrict a user from read/write access on the entire drive with the exception of one folder?