PROVIDE ADMIN ACCESS TO CERTAIN USERS FOR CERTAIN FOLDERS ONLY

Question

I have an issue with a particular program, it has two different locations and an asmuwrapper.exe file with a user access control lock on it, so when users print from this application, it prompts for an AD account login. the work-a-around has to be replaced this file with one that is unlocked, however when we do our updates somehow that file is getting locked again.

there are two locations: C:\filename and C:\programfiles(86)\Filename

According to the product owner the file with the user access control ( Admin Locked file ) is the correct file that needs to be used and the fix for this is to provide the user's admin rights. We are not going to be providing users full admin rights over the computer, but I know there is a way to provide full admin rights over specific folders.

NOTE:

I have tried going to the folders and right-clicking, going into security, and adding the computer name and the AD account name, but that is not working.

There has got to be a simple way for me to do this that security won't freak out about.

2: It could also be a blanked command / GP because not all users even use this program so it wouldn't matter.

Thanks in advance.

Answer 1

There are a few ways to provide specific users with admin rights over specific folders without providing them full admin rights over the computer.

One option is to use Group Policy Objects (GPOs) to set permissions on specific folders. This can be done by creating a new GPO and linking it to the appropriate Organizational Unit (OU) that contains the users who need access to the specific folder. Then, you can use the GPO to set permissions for the folder, such as giving the users full control over the folder.

Another option is to use the Security tab in the folder's Properties to set permissions for specific users or groups. You can add the user or group to the folder's permissions list and give them full control over the folder.

You can also use the command line tool icacls to grant permissions to specific users or groups on a folder.

It's important to keep in mind that this will grant the user full control over the folder, including the ability to delete or modify the files in the folder. And also, you should test it in a sandbox environment before implementing it in the production environment.

It could also be a good idea to consult with your security team to make sure that this solution is compliant with your organization's security policies before proceeding.