A systems administrator is deploying a newly released proprietary database client application to standard domain users across a corporate network. During post-deployment testing, users encounter two main operational failures: they cannot save custom report configurations to the network share path `\\FS1\Reports`, and the application crashes on launch when attempting to update local configuration state stored within `HKLM\SOFTWARE\DataCorp\Client`. The administrator must resolve these issues while adhering to the principle of least privilege. Which TWO of the following configurations should the administrator perform? (Select TWO.)
- Grant the Domain Users group Modify permissions on the shared network folder directory.Answer
- Adjust the Access Control List (ACL) on the HKLM\SOFTWARE\DataCorp\Client registry key to grant Write access to Domain Users.Answer
- CAdd the Domain Users group to the local Administrators group on all client workstations.
- DUpgrade the client operating system to Windows 11 Enterprise to enable automatic elevated registry virtualization for standard users.
Answer
The administrator should grant the Domain Users group Modify permissions on the network share directory and adjust the ACL on the application's specific HKLM registry key to grant Write access.
To resolve network file saving errors and application launch crashes while respecting least privilege, the administrator must target only the specific resources requested by the application. Granting Modify permissions on the shared network folder allows file creation and editing. Granting granular Write access specifically on the application's subkey within HKEY_LOCAL_MACHINE permits required registry updates without making users full local administrators.
Step-by-Step Solution
Key Concept
Granular permission management for application deployment under the principle of least privilege.