Restrict File Dialogs
Unprivileged users may need to run some applications with elevated privilege.
Th Restrict File Dialogs action only supports the default Windows Explorer shell. Alternative or third-party shell environments are not supported.
To ensure that just enough privilege is granted, the Restrict File Dialogs action can be associated with the targeted applications through an elevation policy. Settings within the Restrict File Dialogs action can be configured to restrict specified actions from happening in the file Open and file Save dialogs of the associated application, as well as folder browser dialogs.
Delinea typically recommends that you do not use the Restrict File Dialogs action with processes that are not elevated, as non-administrator users are usually restricted from these file dialog actions (although with some edge cases, this may be required).
Restrict File Dialog Settings include:
-
Create Processes as User
-
Disable Context Menu Options
-
Disable File Open Dialog
-
Disable File Save Dialog
-
Prevent File Operations