Is it possible to set up NTFS permissions on a folder to deny access to a user, while allowing a specific program running under their account to access it?

Specifically, user A is logged in as an Administrator, and runs a sync program (AeroFS) which needs to be able to sync user Z (non-admin) files. However, A should not be able to look through Z's files normally (I know an admin can take ownership anyway, but that's not the issue here).

  • What's preventing you from running AeroFS as the limited user instead? Without knowing more, that seems like the easier solution. – Stephen Jennings Apr 23 '13 at 5:54
  • @Stephen The limited user is not logged often, but they still need their files in sync. – dbkk101 Apr 23 '13 at 6:31

No, this is not possible.

There would be a possible solution if the sync application is using the SetBackupPrivilege and user A is in the BackupOperators group. In that case the ntfs security will be bypassed for the backup.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.