Windows: Make file only accessible for certain process

Discussion in 'backup, imaging & disk mgmt' started by TestPersonX, Jun 2, 2016.

  1. TestPersonX

    TestPersonX Registered Member

    Joined:
    Jul 13, 2009
    Posts:
    32
    Hi everyone,

    I'm running SyncBack Pro which saves settings within an *.ini-file. As the ini-file contains a password, I'd like to modify the access rights so that only SyncBack.exe can access the file.

    Is it possible? I don't want to use any FileProtector Software (which uses Windows Kernel Rules) - but I want to implement this one specific rule using Windows Tools - possible?

    Thanks in advance
     
  2. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,088
    You can't create ACL rule for process but you can for user. You can create another user, give right only to this user to access file and run SyncBack Pro under this user.
     
  3. TestPersonX

    TestPersonX Registered Member

    Joined:
    Jul 13, 2009
    Posts:
    32
    But then, I guess still every administrator could access that file, even if he is not listed, right?
    Then it won't work... As every elevated process with UAC highest privileges could still access it.

    I mean, right now, I only have full admins be able to access the file - and I am running Syncback elevated, as I want it to be able to copy/backup "all" files, even files only allowed to be accessed by privileged users.
     
  4. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,088
    You can remove Administrator, Users and Authenticated users permissions and only allow that specific user to access file (do this last action first, before removing rights for other user groups). That way other administrators can't access file.

    EDIT: also make backup of file and give your dedicated user full rights.
     
Loading...