📎 AI Summary:
The original poster inquires whether files created by a Windows installer (.msi), specifically using WiXtools, are readable by non-admin users and seeks advice on making such files inaccessible to them for security reasons. Nemobeer responds by explaining that, by default, files are generally readable by all users unless restricted by specific permissions, and suggests consulting WiX documentation or scripting ACL changes to control access. The overall discussion highlights the importance of adjusting file permissions to secure sensitive files created during installation.

porton

New Member
Member details
Joined
Sep 6, 2023
Messages
2
Thread Author #1
When a Windows installer (.msi) creates a file (e.g. by <Component> of WiXtools), will the file be readable by non-admin users?

I want a file not readable by non-admin users, for security reasons.

How can I make WiXtools to create a non-readable (by non-admins) file?
 

Solution
The default scenario is all users can read files with the exception of certain types of software and sensitive areas of the OS itself. Files placed in any given directory will have permissions any child directory/file will inherit.

I can't answer specifically for WIX (never used it) but I would start with their documentation. I would imagine you should be able to script out a change to ACLs.

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
The default scenario is all users can read files with the exception of certain types of software and sensitive areas of the OS itself. Files placed in any given directory will have permissions any child directory/file will inherit.

I can't answer specifically for WIX (never used it) but I would start with their documentation. I would imagine you should be able to script out a change to ACLs.
 
Solution