How do I make InnoSetup remove permissions on a folder for everyone but the current user?

Question

I have an "Install Just for me" option on my InnoSetup installer. If this option is chosen the program files are written to a folder off the users local settings application data folder, rather than C:\\Program Files .

It seems that other admin users can still poke around and find this folder and therefore execute the app, which I want to avoid if the user is installing "just for me".

How do I specify that this folder (nominally {userappdata}\\MyApp\\Program Files\\ ) has permissions removed for everyone except the user running the installer?

Answer 1

You can use cacls.exe or use the various permission directives . But no matter what you do, an administrators can always give themselves permission to access the file. They are administrators after all...