Question

Difficulty: MediumApplication Installation and Configuration Concepts

An IT technician completes the installation of a client-server inventory management software application on a workstation using a local administrator account. The software installs without errors. However, when a standard non-administrative user logs into the workstation and attempts to launch the software, the application immediately crashes with a file access error. The technician notes that the application attempts to modify a configuration file stored directly inside C:\Program Files\InventoryApp\config.ini during startup. Which of the following is the BEST resolution to allow the application to run properly for standard users while adhering to security best practices?

  1. Grant standard users Write access permissions specifically to the application's configuration file or move user configuration data to the %AppData% directory.Answer
  2. B
    Add the standard user account to the local Administrators group on the workstation.
  3. C
    Upgrade the operating system from Windows 11 Home to Windows 11 Pro to unlock application write capabilities.
  4. D
    Reinstall the application using the msiexec /x command-line switch from an elevated command prompt.

Answer

Grant standard users Write access permissions specifically to the application's configuration file or move user configuration data to the %AppData% directory.
In modern Windows operating systems, the C:\Program Files directory is protected by NTFS permissions that grant standard users Read & Execute permissions, but restrict Write and Modify permissions to administrative accounts. When an application attempts to write runtime updates to its installation folder in Program Files, standard users encounter access denied errors. Modifying permissions specifically on the required file or redirecting settings to %AppData% (where users have full control over their own profiles) resolves the issue securely.

Step-by-Step Solution

1
Identify the cause of the application crash
Standard users lack Write permissions to files inside C:\Program Files under standard Windows NTFS access controls.
By default, non-administrative accounts have Read & Execute permissions in System directories like C:\Program Files.
2
Evaluate remediation options based on security best practices
Modifying specific file permissions or storing per-user settings in %AppData% allows the file to be updated without granting unnecessary administrative rights.
Following the principle of least privilege prevents security risks associated with over-privileged user accounts.

Key Concept

Application Installation Folder Permissions and Directory Storage Requirements
Rate this question