Use the lockpermissions table to define the permissions on the file. Alternatly, you can create a custom action to do this for you too. You would need the file xcacls.exe either installed or embeded, and use that from a custom action to make the change.
