An IT support technician is deploying a specialized line-of-business application to several Windows 11 workstations used by multiple standard domain users. During testing, standard users receive an error stating that the application cannot save configuration files to its default directory inside C:\Program Files, and it fails to locate its database network path upon startup. Which TWO configuration steps should the technician take to resolve these issues while maintaining security best practices? (Select TWO.)
- Reconfigure the application configuration path to store user-specific data in %LOCALAPPDATA% or grant standard users Write permissions to a designated directory in %PROGRAMDATA%.Answer
- Configure a Group Policy Preference drive mapping script to ensure the database network share is automatically mapped during user sign-in.Answer
- CAdd standard user accounts to the local Administrators group on each workstation to bypass program directory permission restrictions.
- DExecute sfc /scannow from an elevated command prompt to repair default access permissions on C:\Program Files.
Answer
The technician should reconfigure the application settings to use %LOCALAPPDATA% or %PROGRAMDATA% for user configuration files and deploy a Group Policy logon script or preference to automatically map the required database network share.
Standard domain users lack write permissions to C:\Program Files by default. Writing user-specific settings to profile paths such as %LOCALAPPDATA% or %PROGRAMDATA% aligns with Windows security standards. Automating network drive mappings via Group Policy ensures the application reliably connects to its database share during startup.
Step-by-Step Solution
Key Concept
Application Environment Configuration and User Permission Scoping