Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to set up NTFS permissions on a folder to deny access to a user, while allowing a specific program running under their account to access it?

Specifically, user A is logged in as an Administrator, and runs a sync program (AeroFS) which needs to be able to sync user Z (non-admin) files. However, A should not be able to look through Z's files normally (I know an admin can take ownership anyway, but that's not the issue here).

share|improve this question
    
What's preventing you from running AeroFS as the limited user instead? Without knowing more, that seems like the easier solution. – Stephen Jennings Apr 23 '13 at 5:54
    
@Stephen The limited user is not logged often, but they still need their files in sync. – dbkk101 Apr 23 '13 at 6:31

No, this is not possible.

There would be a possible solution if the sync application is using the SetBackupPrivilege and user A is in the BackupOperators group. In that case the ntfs security will be bypassed for the backup.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .