[wpkg-users] Relax Win 7 permissions for unprivileged users

[Natxo Asenjo]

On Sat, Feb 12, 2011 at 12:21 AM, Mark Nienberg <gmane at tippingmar.com> wrote:
> On 2/11/2011 12:59 PM, Natxo Asenjo wrote:
>>
>> you need to specify the inheritance, I think. Try this:
>>
>> icacls "%ProgramFiles(x86)%\Mozilla Firefox" /grant Users:(OI)(CI)F
>>
>> This way the permissions will be pushed downwards from that folder.
>> Otherwise the permissions only apply to the folder and not to the
>> underlying objects.
>
> I'll give it a try. I spent a lot of time testing at the command line and
> found it pretty frustrating. Thanks.

yes, windows permissions are a pain to script.

>> But ..., are you really sure you want to do this? You are basically
>> allowing them to install anything on the system, they only need to
>> specify a folder in that path.
>
> I don't see any way around this for the time being. In addition to the
> eamples I mentioned, I have some software packages that try to write their
> ini files and so forth into the Program directory. Until those programs are
> updated (by vendors, not me), I have to allow user write access to specific
> directories.

I feel your pain.