Is there a way to restrict access to windows folders with intune?
So far I have only found the windows defender restriction, but that seems to block programs from accessing folders, not users.
We use a chrome extension to monitor students internet use. The extension auto installs with google admin, but students have found that they can simply go through file explorer and delete the folder for the extension. This seems to confuse chrome and keeps the extension from reinstalling. I'm hoping I can change the permissions to the folder, but so far haven't found a way to do so. We only have intune, not traditional gpo.
The folder fyi, is within c:/users/profile/appdata/local/google
It is already hidden, but the students are savvy enough to get past that. I tried naming it a protected folder, but that doesn't really add any security to it.