Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to set up NTFS permissions on a folder to deny access to a user, while allowing a specific program running under their account to access it?

Specifically, user A is logged in as an Administrator, and runs a sync program (AeroFS) which needs to be able to sync user Z (non-admin) files. However, A should not be able to look through Z's files normally (I know an admin can take ownership anyway, but that's not the issue here).

share|improve this question
What's preventing you from running AeroFS as the limited user instead? Without knowing more, that seems like the easier solution. – Stephen Jennings Apr 23 '13 at 5:54
@Stephen The limited user is not logged often, but they still need their files in sync. – dbkk101 Apr 23 '13 at 6:31

No, this is not possible.

There would be a possible solution if the sync application is using the SetBackupPrivilege and user A is in the BackupOperators group. In that case the ntfs security will be bypassed for the backup.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.