How to apply permissions on files or folders

Advanced Installer allows you to apply independent permissions for a single or multiple files but also on folders and subfolders.

When you configure permissions in Advanced Installer, they are applied at installation time through the Windows Installer engine. This means:

  • Permissions are set after the target file or folder is created.
  • If the file/folder already exists, the installer updates the existing ACL (Access Control List) rather than replacing it.
  • Permissions are reset on repair or reinstall, and removed only when the file/folder is uninstalled (if not shared).

Apply permissions on files or folders

To apply permissions for a file or a folder, you can follow these steps:

ImportantIt is known that in Windows Installer only Everyone and Administrators are the same for all languages and all other account names should be localized. For example, the built-in Users group is called Users on English Windows, but on non-English editions it has a different name (e.g. French: Utilisateurs)

Advanced Installer automatically performs the localizations when using one of the following "Users and Groups" properties:

  • USR_ADMINISTRATOR
  • USR_ANONYMOUS
  • USR_GUEST
  • USR_KEY_DISTR_CENTER_SERVICE
  • USR_NETWORK_SERVICE
  • GRP_ACCOUNT_OPS
  • GRP_AUTHENTICATED_USERS
  • GRP_BACKUP_OPS
  • GRP_DOMAIN_COMPUTERS
  • GRP_DOMAIN_CONTROLLERS
  • GRP_DOMAIN_USERS
  • GRP_GUESTS
  • GRP_LOGGING_USERS
  • GRP_MONITORING_USERS
  • GRP_NETWORK_CONFIGURATION_OPS
  • GRP_POWER_USERS
  • GRP_PREW2KCOMPACCESS
  • GRP_PRINT_OPS
  • GRP_RAS_SERVERS
  • GRP_REPLICATOR
  • GRP_RID_INCOMING_FOREST_TRUST_BUILDERS
  • GRP_REMOTE_DESKTOP_USERS
  • GRP_SERVER_OPS
  • GRP_USERS

Practical example

You have an app that stores logs in:

C:\ProgramData\MyApp\Logs

To ensure all users can write logs, follow these steps: