File and Folder permission

[ipconfig]

I am repackaging applications for terminal server and users need write protection on specific folders. Is there any way of not REPLACING the filepermissions on folders but ADD permissions to application groups?

I guess this is a limitation by MSI 2.0.

Anyone have best practices on this topic. Alternative is to create custom action and put a vbscript to do the job with cacls.exe but - a problem here is that long filenames (c:\program file\application) will not be read to you need to create "ShortPath" variables to run the script - which take quite a long to write :rolleyes: time.

[RajeshTammana]

Unfortunately MSI's LockPermissions table does not add permissions to file/folder objects but replaces them.

The only solution for this is to write custom actions that use Win32 API to add permissions.

If you would like, I can send sample code to do that but Macrovision will not support that code. Send me an email at rtammana@macrovision.com, if you want that.