Thank you Brandon.

I am concerned that assigning directory rights individually by hand can lead to mistakes and that a programmatic approach would be better.

What do you think of these two approaches using a Powershell script?

1. User name based data directory name: For example user 1234_JSmith’s data directory tree may be c:\Clients\4321Data
2. Table based data directory name: There is a table somewhere that indicates that user JSmith’s data directory tree may be c:\Clients\xxxxxxx

Appreciate the explanation of what AppLocker does.

Thanks,

Alex



>>We are preparing to offer access to our vfp desktop app as a remote app, hosted in the cloud.
>>
>>Since it would be a multi-tenant server I want to limit a user's access to certain directories and actions. How can you do this programmatically?
>>
>>Thank you,
>>
>>Alex
>
>PowerShell is going to be your friend here.
>
>Setup a single folder per company. Setup a group that has access to that folder. Each company users is a member of the company group and nothing else.
>
>Before creating the users there is a reg entry you can modify that will create the users personal folders in the company folder.
>
>Fire up the calculator app as the user in your powershell script to get windows to create those user folders.
>
>Use AppLocker to prevent the users from running any other programs.
>
>
>
>
>BH