An IT technician configures a line-of-business desktop application on a shared Windows 11 workstation. The application runs without issues for local administrators, but standard users encounter file access errors whenever the software attempts to write temporary cache files to its default directory at C:\Program Files\CorporateApp\Data. Which of the following actions should the technician take to resolve the issue while adhering to the principle of least privilege?
- Grant standard users Modify permissions specifically on the C:\Program Files\CorporateApp\Data subfolder.Answer
- BAdd standard user accounts to the local Administrators group on the workstation.
- CConfigure the application executable properties to always run as Administrator for standard users.
- DChange the User Account Control settings to 'Never Notify' across the operating system.
Answer
Grant standard users Modify permissions specifically on the C:\Program Files\CorporateApp\Data subfolder.
Adjusting NTFS permissions on only the specific subfolder where write access is required allows standard users to run the application correctly without compromising security across the rest of the Program Files directory structure.
Step-by-Step Solution
Key Concept
NTFS Application File Permissions and Least Privilege
Estimated Time:1m 15s