We have a third party software in our company, that on any start of the program tries to modify a file directly placed on C. All our users are non-admin users, and thus have no rights to write or modify files on the C drive which I understand is a good thing. What I do not understand however is that even if I give the user full access and ownership to one specific file on C he still cannot modify it (UAC is off). I tried this via GUI as well as icacls (even removing the inheritance from C) but nothing worked. How am I supposed to make this software run under Windows 7 if it really needs to write there? Best option would of course be something automatable e.g. via GPO, but I would already be glad if someone could point out any solution at all. So far I only found completely unaccepatble workarounds as retrieving ownership for C and all Subdirectories.

I am afraid that this is bad softwareb design that is you major problem. There are at least two possibilities: 1. Create scheduled job that start application with Administrator credentials, enhaced priviledges that starts when user login. 2. Use script containig runas function http://technet.microsoft.com/en-us/library/cc771525(v=ws.10).aspx Regards Milos

I am afraid that this is bad softwareb design that is you major problem. There are at least two possibilities: 1. Create scheduled job that start application with Administrator credentials, enhaced priviledges that starts when user login. 2. Use script containig runas function http://technet.microsoft.com/en-us/library/cc771525(v=ws.10).aspx Regards Milos

Well of course it is extremely bad software design. Some software we have use was designed 20 years ago though, when things as this were still pretty common. And what sort of software design is it when I as an administrator can give permission to my files that are pretty much ignored... I do not understand Microsoft at all in this case. It is good to have high standards, and even to make it hard to ignore them, so that software designers will be forced to change their design style. But in the end the admin has to have all rights to do what is necessary to fix problems if someone messed up. Using admin rights is imho not an option. This would open the whole system (User could start mmc via File Open dialog and grant himself full admin rights, etc.)

Well of course it is extremely bad software design. Some software we have use was designed 20 years ago though, when things as this were still pretty common. And what sort of software design is it when I as an administrator can give permission to my files that are pretty much ignored... I do not understand Microsoft at all in this case. It is good to have high standards, and even to make it hard to ignore them, so that software designers will be forced to change their design style. But in the end the admin has to have all rights to do what is necessary to fix problems if someone messed up. Using admin rights is imho not an option. This would open the whole system (User could start mmc via File Open dialog and grant himself full admin rights, etc.)

Hi, Based my research, this setting was by design and caused of considering the security. If it is possible, you may try install this software in XP Mode for a test. For more information about XP Mode, please refer to this. http://www.microsoft.com/windows/virtual-pc/download.aspx/Kim Zhou TechNet Community Support

Hi, Based my research, this setting was by design and caused of considering the security. If it is possible, you may try install this software in XP Mode for a test. For more information about XP Mode, please refer to this. http://www.microsoft.com/windows/virtual-pc/download.aspx/Kim Zhou TechNet Community Support

To my mind this design is a bad idea even security wise. What happens is that we are presented with one extremely easy and ultra insecure solution (i.e. admin rights) and no other real option within Windows 7 itself. Most people will not bother with anything else because it is extremely cumbersome in comparison and the whole point of the design in the first place is more than missed... XP Mode would work, and I even think it can be done with APP-V, which might be our solution in the end because it is a lot more practicable if the software is needed more than once. I still cannot believe however that there is no real solution, in terms of access rights.

To my mind this design is a bad idea even security wise. What happens is that we are presented with one extremely easy and ultra insecure solution (i.e. admin rights) and no other real option within Windows 7 itself. Most people will not bother with anything else because it is extremely cumbersome in comparison and the whole point of the design in the first place is more than missed... XP Mode would work, and I even think it can be done with APP-V, which might be our solution in the end because it is a lot more practicable if the software is needed more than once. I still cannot believe however that there is no real solution, in terms of access rights.