Block Applcation Access to a Folder

[WindWalkerX]

Is it possible to block an individual application's access to a specific folder?
Let's say I have a folder called "Water" and and application called "Fire" Can I prevent "Fire" from reading "Water"? Meanwhile, any non-"Fire" application can continue reading "Water" without issue.

As per the FAQs my expertise is well above average, but I'm far from a systems admin. I'm a hobbyist C++ coder.

 

[Mike Connor]

You could set up a work-around using App-Locker. Rights (Permissions) are basically user oriented, and I can't think of a way offhand to apply them to a specific application, but you can prevent users from using specific applications, and so achieve basically the same thing.

See ;

Windows 7 AppLocker Executive Overview

Download details: Windows 7 Walkthrough: AppLocker

Use with extreme care!!! You can really jigger a system if you make a mistake.

Regards....Mike Connor

 

[WindWalkerX]

Reading over the documentation it doesn't sound as though that can prevent read access. It sounds as though it allows certain apps to run, and prevents others from running, but does not restrict what they can do while running.
Am I misunderstanding it's capabilities?

 

[Fayla]

First thought. Make a new user account solely for the problem application, make sure that the application always and only runs under this newly created user. Put a deny permission on the target folder for that specific new user account.

http://www.sevenforums.com/tutorials/419-run-different-user.html

Using "Run as different user"

Is it possible to block an individual application's access to a specific folder?
Let's say I have a folder called "Water" and and application called "Fire" Can I prevent "Fire" from reading "Water"? Meanwhile, any non-"Fire" application can continue reading "Water" without issue.

As per the FAQs my expertise is well above average, but I'm far from a systems admin. I'm a hobbyist C++ coder.

 

[Mike Connor]

Reading over the documentation it doesn't sound as though that can prevent read access. It sounds as though it allows certain apps to run, and prevents others from running, but does not restrict what they can do while running.

It will stop a specific application from running at all. You can stop a specific user or a specific group of users from using a specific application. They simply can not use the specified application.

You can restrict what running apps can do by changing system permissions in the application properties;





Regards....Mike Connor

 

[Mike Connor]

You can also set permissions on a specific folder;



Using a combination of these things you can achieve what you want.

( Sorry about the German expressions, the language module does not translate everything, but it should be clear enough.).

Regards....Mike Connor

 

[WindWalkerX]

Excellent. I had a feeling there was a way to do this.
I just needed the input of more creative minds.

Thank you both.