On Fri, Feb 11, 2011 at 7:17 PM, Mark Nienberg <[email protected]> wrote: > For some applications I need to relax the security settings on the Program > Directory. For example, I would like Mozilla firefox and thunderbird to be > able to self-update even for my users that are unprivileged. I thought > something like the following would work in a batch file: > > > "%SOFTWARE%\firefox\Firefox Setup 3.6.12.exe" -ms > icacls "%ProgramFiles(x86)%\Mozilla Firefox" /grant Users:F > > But I've had inconsistent results. Is this the best method? > Thanks,
you need to specify the inheritance, I think. Try this: icacls "%ProgramFiles(x86)%\Mozilla Firefox" /grant Users:(OI)(CI)F This way the permissions will be pushed downwards from that folder. Otherwise the permissions only apply to the folder and not to the underlying objects. But ..., are you really sure you want to do this? You are basically allowing them to install anything on the system, they only need to specify a folder in that path. -- natxo ------------------------------------------------------------------------- wpkg-users mailing list archives >> http://lists.wpkg.org/pipermail/wpkg-users/ _______________________________________________ wpkg-users mailing list [email protected] http://lists.wpkg.org/mailman/listinfo/wpkg-users
