so you want three to work normal an 5 with card reader one swipe unlock all 5 all u should need is to turn off the crc inputs to the three floors u want open there should be two rs boards find the address an change

yes thats right, however there is only one input at address 16-1, it is being used for the ccrccc i/o. this is the only contact from the security system. if it is on all floors are open, if it is off all floors are locked. so, i see what you are saying now, just go to the cric i/o that i want to stay open and set them to 010, and leave the others as they are? does that sound right. just to be clear, when i looked at the 8 cricc input locations, they did not have a board address assigned to them, i believe they were all set to 000. only the ccrccc input had the address 16-1.

usually ccrccc is set to 010 for card reader an its I/o 70.
I/o 33-48 are cric01-16 card reader inputs car, then they would be addressed what ever number or spare rs contact like 16-1 might be.by any chance did they split the common to the buttons so swipe card an circuit makes up for ex amount of time to register a call,then they used a dry set of contacts of phase two key switch to override card reader.I have seen it done that way before.

ck I/o 33-48 an 70 in ocss again

also ck if EN-CRC is set at,that enables card reader car I think if set at 3or4 indepenant will over ride reader

This is a classic case( when it can get complicated) when sometimes it is easier to wire the readers outside of the lift control and just use a relay to cut the supply to the button common. Supply the reader, have a box on top of the car and run wires to the button panel. Then when you wanted to change the floors you would just have to replace the direct feed to the floors needed and the secured floors stay the same.

if you are thinking of adding external relays and circuits to fix your problem you will also have to add a circuit to enable the car calls on fire service and independent service,

You can do that to but in my honest opinion it is easier to program a few I/o's and a rs5 board. Its all about the card reader control panel on their end. All their doing is landing a few wires to your controller through some dry contacts on their end.

address 326 is ccrccc and it is set to 16-1. looks like the previous company just chose that board address as there was a spare input and the board was in the controller already. the only cable coming from the security system is connected to this input via one n/o contact from one of their relays. the cric01-cric80 starts at address 161 and ends at 240. this is a gen2 car. this job only uses cric1-8 and i believe they were set to 000. when the security relay contact is opened, the ccrccc input is low and no calls are accepted. when it is on the input is hi and all calls are accepted. so i am going to go to job and set the ones i want to be off on security to either 000 or 010. i think that it should work. will let you know thanks drip can. if this does not work, then i will have to add rs boards and address as you indicate.