0
I want to disable the user/admins from reading contents/editing and the only way the the files in the folder can be read/edited are by that program/process. How could I do this in windows 10?
Ummiaa
Posted 2019-05-21T19:21:02.490
Reputation: 1
Make Folder only able to read/write from a certain process
1You can't. Admins are essentially superusers and can override any restrictions. – DavidPostill – 2019-05-21T19:26:23.277
Not even some way if I make the program must be ran as admin? or create some kind of hierarchy for the existing users? not possible? – Ummiaa – 2019-05-21T19:28:20.090
No it is not possible. Admins can always read/write any files/folders. – DavidPostill – 2019-05-21T19:29:39.543
What about creating like a hidden admin-user and explicitly telling the OS to go though this to access it? I mean there got to be some way. While other admins-user if any are disabled, sorry I really need this for my security app. – Ummiaa – 2019-05-21T19:34:02.537
There is no such thing as a hidden admin user. – DavidPostill – 2019-05-21T19:35:03.680
If you want files to be private then encrypt them. – DavidPostill – 2019-05-21T19:35:32.967
"Admins can always" is not true. If an admin has no access through an ACL either inherited or direct, then an admin can not read or write in a location. An admin in windows is not "root" in *nix. You can even remove an admins right (or anyone's) to take ownership. Its a bad idea, but you can do it. I worked on a NTFS security app.. while doing so, I messed up and orphaned files that not even the domain admin could read or remove. Pissed him off bigtime. – Señor CMasMas – 2019-05-21T21:05:09.430