My computer holds both personal files and work files. I do not want every new development tool to have access to both.
The computer setup I am working toward uses a separate standard account for development. A standard account has fewer system-level powers than an administrator account. I would use administrator access deliberately when a specific installation or system change requires it, and only then.
This takes some extra work to setup, but it gives me a clearer place for projects, work accounts, and development tools. I feel this step is well worth the effort involved.
There is an important detail here: creating a folder called Work does not prevent software from opening other folders. File permissions control access. A separate account can help enforce that separation when those permissions are configured correctly.
Shared folders and extra drives deserve a check. They may be readable from more accounts than expected. The same question applies to Mac and Linux: what can the account running the tool actually open?
I will test this with harmless sample files. I do not need to ask an AI tool to read a real tax return to find out whether a folder is protected.
Within the work area, each project gets its own folder. When a task needs one project, I plan to open that project directly. Selecting the parent folder could include other businesses or clients. I want and there needs to be clear separation.
A separate browser profile can also help keep work logins organized. It does not provide the same file restrictions as a separate operating system account, and it should not be treated as a complete security barrier.
For my Windows setup, there is a sequencing detail: create the work account before installing the Linux workspace that belongs to that user. The guides explain why switching accounts afterward can mean repeating the installation. While I know that this setup requires extra work, I also aim to make the work as efficient as possible.
Start by making a simple list: personal files, development files, and shared files. Then check which of those the development account can actually read and have access to.
Previously: Protect the Files You Already Have