Gareth at Serif wrote: > Hi guys, > > I've been using SubinACL to ensure that some of our own registry keys have > full control permissions for the Everyone user group instead of any > inherited permissions that might cause issues - this is particularly vital > on Vista where even administrators have limited access.
Full control is a bad idea (since any user could them come along and modify the permissions) - the maximum should be change, and you should limit it to the absolute minimum required to use the application, otherwise you open potential security issues. I'd also normally use 'Authenticated Users' not 'Everyone' as an extra check, since 'Everyone' includes anonymous and guest users, who you don't want to be able to write to anything normally. > The problem is that I've just discovered (using a German copy of XP) that > "Everyone" doesn't always mean "Everyone". In this German example, the > Everyone group is actually called Jeder and it is this user group that will Use the SIDs instead. As you've found names are localised. Tony ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
