We are using install4j v10.0.1. I'm trying to restrict access to all of the files/folders within the Windows installation directory via use of a "Change Windows file rights" action. I'm attempting to revoke all access to the installation directory from the "Users" trustee/group, but the Users group still seems to be inheriting "Read & Execute" permissions from a higher-level folder (e.g., C:\Program Files). I want the Administrators group to have full access to the files/folders within the installation directory, but I don't want the Users group to have any access. How can I meet this requirement?
1 Answers
In the "Change Windows file rights" action, setting the "Access mode" property to "Revoke access" deletes an existing ACE with the same specification.
In your case, you have to use "Deny access" instead.
Related