Restrict program to do any changes in Windows and prevent access to administrator features

Question

I am using Windows Server 2016. I need to run the portable version of the third party program and I don't want it to make changes to the Windows registry or files or have access to super administrator features, prevent the ability to modify files or write to other folders, it just needs to work within its own folder where the associated files are located. I am looking for answers on how to accomplish this.

I'm assuming that a new Windows restricted user needs to be created, then the program will be strictly limited to that user permission, if I'm correct, how to properly create a restricted user account and set restricted permissions for the program.

Answer 1

Hi,
Welcome to share here！
Based on my understanding, if the user is a stand user not in the local administrator group , it will not have the right to change or open folders under other user names.
And the folder permissions can be modified as your requirement.

For other administrative permission , you can use the UAC to control it :