To define D:\my_work_dir as trusted with full access, enter:
sp_jreconfig "add", "work_dir", "C:\my_work_dir/RW"
To define D:\my_read_only as trusted with read-only access, enter:
sp_jreconfig "add", "work_dir","D:\my_read_only_dir/RO"
To define E:\general as trusted with full access, but disallow access to a subdirectory of E:\general called TOP_SECRET, enter:
sp_jreconfig "add", "work_dir","E:\general/RW;E:\general\TOP_SECRET/NA"
Delimit individual directory entries with a semi-colon.