[wpkg-users] Relax Win 7 permissions for unprivileged users

[Mark Nienberg]

On 2/11/2011 10:37 AM, Troy Hamilton wrote:

>> "%SOFTWARE%\firefox\Firefox Setup 3.6.12.exe" -ms
>> icacls "%ProgramFiles(x86)%\Mozilla Firefox" /grant Users:F
>>
>> But I've had inconsistent results. Is this the best method?
>
> After you run the above icacls command, does the expected "users" ACE
> show up in the permissions tab of the "Mozilla Firefox" directory
> properties?  If not, then you might give setacl.exe
> (http://helgeklein.com/setacl/examples/managing-file-system-permissions-with-setacl-exe/)
> a try to see if you get the ACE you expect.

I think sometimes it does show up and work, but on some machines it does not. I 
haven't found a pattern yet. I'll download and try the setacl program. Thanks for 
that suggestion.

> Once the users group has full control of the firefox directory (either
> from running icacls, setacl, or manually setting the permissions) does
> the self-update work correctly?

Yes. Once I see the correct settings in the security properties, it works.

-- 
Mark Nienberg
Sent from an invalid address. Please reply to the group.