question

LastCodeLine-3371 avatar image
0 Votes"
LastCodeLine-3371 asked FanFan-MSFT commented

Restrict program to do any changes in Windows and prevent access to administrator features

I am using Windows Server 2016. I need to run the portable version of the third party program and I don't want it to make changes to the Windows registry or files or have access to super administrator features, prevent the ability to modify files or write to other folders, it just needs to work within its own folder where the associated files are located. I am looking for answers on how to accomplish this.

I'm assuming that a new Windows restricted user needs to be created, then the program will be strictly limited to that user permission, if I'm correct, how to properly create a restricted user account and set restricted permissions for the program.

windows-server-security
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
 
Just want to confirm the current situations.
If there's anything you'd like to know, don't hesitate to ask.

Best Regards,

0 Votes 0 ·

1 Answer

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,
Welcome to share here!
Based on my understanding, if the user is a stand user not in the local administrator group , it will not have the right to change or open folders under other user names.
And the folder permissions can be modified as your requirement.

For other administrative permission , you can use the UAC to control it :
83104-3312.jpg



3312.jpg (158.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.