[wpkg-users] Relax Win 7 permissions for unprivileged users

[Natxo Asenjo]

On Fri, Feb 11, 2011 at 7:17 PM, Mark Nienberg <gmane at tippingmar.com> wrote:
> For some applications I need to relax the security settings on the Program
> Directory. For example, I would like Mozilla firefox and thunderbird to be
> able to self-update even for my users that are unprivileged. I thought
> something like the following would work in a batch file:
>
>
> "%SOFTWARE%\firefox\Firefox Setup 3.6.12.exe" -ms
> icacls "%ProgramFiles(x86)%\Mozilla Firefox" /grant Users:F
>
> But I've had inconsistent results. Is this the best method?
> Thanks,

you need to specify the inheritance, I think. Try this:

icacls "%ProgramFiles(x86)%\Mozilla Firefox" /grant Users:(OI)(CI)F

This way the permissions will be pushed downwards from that folder.
Otherwise the permissions only apply to the folder and not to the
underlying objects.

But ..., are you really sure you want to do this? You are basically
allowing them to install anything on the system, they only need to
specify a folder in that path.

--
natxo