Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is it possible to set up NTFS permissions on a folder to deny access to a user, while allowing a specific program running under their account to access it?

Specifically, user A is logged in as an Administrator, and runs a sync program (AeroFS) which needs to be able to sync user Z (non-admin) files. However, A should not be able to look through Z's files normally (I know an admin can take ownership anyway, but that's not the issue here).

share|improve this question
    
What's preventing you from running AeroFS as the limited user instead? Without knowing more, that seems like the easier solution. –  Stephen Jennings Apr 23 '13 at 5:54
    
@Stephen The limited user is not logged often, but they still need their files in sync. –  dbkk101 Apr 23 '13 at 6:31
add comment

1 Answer

No, this is not possible.

There would be a possible solution if the sync application is using the SetBackupPrivilege and user A is in the BackupOperators group. In that case the ntfs security will be bypassed for the backup.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.