Inno Setup Domain/Active Directory Rights

Question

I don't see a default option on how to do this, but maybe with a [Code] section it is possible, but no clue where to start.

The problem: Making a [Dir] entry with everyone-modify does give the local-pc/everyone group modify rights, as one would expect. However, users that log onto that local-pc with their domain or active directory account instead get defaulted to <domain>/<usergroup> with "read" rights. I want those users to also have modify rights. Another possibility would be, that anyone who can access the parent folder can modify this subfolder, which I hoped is what everyone-modify would do.

This issue exists on Windows 7, 10, Server 12, 16 and 19. More might be affected, but that's all I tested.

Answer 1

Inno Setup does not support granting permissions to a specific group. If you need to set different permissions than Inno Setup supports, you need to use an external application/command, like cacls or icacls .

For examples, see:

• Inno Setup - How to give one specific user rights to a folder
• Inno Setup change c:\\ permission

Answer 2

Just checking back in for future people who might find this. It turned out to be a bug in windows and got resolved with an update to it at least on Windows 10 / Server 16/19. As far as I know Win 7 is still broken, but we've stopped supporting it now.