How do I deny access to everybody but me in Windows 7?
I agree, the security tab is certainly confusing.
I think the key thing to understand is you can Deny a privilege to "everyone else" without explicitly checking the Deny box. "Deny" takes precedence over allow, so denying everyone will mean no-one has that privilege, even those to whom you explicitly grant it.
I think you want this set up;
Your folder
- Everyone: Uncheck all boxes
- Your user: Check "Full control"
- Remove any other user
Your wife's folder
- Everyone: Uncheck all boxes
- Your wife's user: Check "Full control"
- Remove any other user
Shared folder
- Everyone: Uncheck all boxes
- Your "kids" user: Check "read"*
- Your user: Check "Full control"
- Your wife's user: Check "Full control"
- Remove any other user
Child folders will inherit their permissions from their parents.
*Here you could optionally deny write, but as the kids user and the everyone user does not have a "check" for write, the user does not get that permission. If you wanted "everyone" to write, but not kids, this is where you would use Deny.