How to apply permissions on files or folders
Advanced Installer allows you to apply independent permissions for a single or multiple files but also on folders and subfolders.
When you configure permissions in Advanced Installer, they are applied at installation time through the Windows Installer engine. This means:
- Permissions are set after the target file or folder is created.
- If the file/folder already exists, the installer updates the existing ACL (Access Control List) rather than replacing it.
- Permissions are reset on repair or reinstall, and removed only when the file/folder is uninstalled (if not shared).
Apply permissions on files or folders
To apply permissions for a file or a folder, you can follow these steps:
- Open file properties or folder properties dialog from its context options
- Go to the Permissions tab
- Apply desired permissions
It is known that in Windows Installer only Everyone and
Administrators are the same for all languages and all other account names
should be localized. For example, the built-in Users group is called
Users on English Windows, but on non-English editions it has a different name
(e.g. French: Utilisateurs)
Advanced Installer automatically performs the localizations when using one of the following "Users and Groups" properties:
- USR_ADMINISTRATOR
- USR_ANONYMOUS
- USR_GUEST
- USR_KEY_DISTR_CENTER_SERVICE
- USR_NETWORK_SERVICE
- GRP_ACCOUNT_OPS
- GRP_AUTHENTICATED_USERS
- GRP_BACKUP_OPS
- GRP_DOMAIN_COMPUTERS
- GRP_DOMAIN_CONTROLLERS
- GRP_DOMAIN_USERS
- GRP_GUESTS
- GRP_LOGGING_USERS
- GRP_MONITORING_USERS
- GRP_NETWORK_CONFIGURATION_OPS
- GRP_POWER_USERS
- GRP_PREW2KCOMPACCESS
- GRP_PRINT_OPS
- GRP_RAS_SERVERS
- GRP_REPLICATOR
- GRP_RID_INCOMING_FOREST_TRUST_BUILDERS
- GRP_REMOTE_DESKTOP_USERS
- GRP_SERVER_OPS
- GRP_USERS
Practical example
You have an app that stores logs in:
C:\ProgramData\MyApp\Logs
To ensure all users can write logs, follow these steps:
- Create folder Logs in Files and Folders view
- Enable Create folder on install Open Permissions
- Add group GRP_USERS -> Grant Modify and Write permissions