Guidelines for User Permissions for the NPO Drive

1. DLC directory can be set for ready only for users. You can remove the Everyone group and explicitly add those domain accounts with read only access. On the server, you would want the admin account and of course the account under which those services (which is typically local system) are running on the server to have full access so that when installations are done, etc. that the admin user on the server can make changes.

Please see the following:
https://knowledgebase.progress.com/articles/Article/P45864


2. For the npo\found\dbfiles directory where live data is stored and maybe npo\Demo\dbfiles, users do not need rights to those folders.
3. For most other items in NPO, users need read/write access for the NPO directory

Please see the following article for some other suggestions for Progress:
https://knowledgebase.progress.com/articles/Article/Progress-and-Windows-Permissions