How do I make InnoSetup remove permissions on a folder for everyone but the current user?

Question

I have an "Install Just for me" option on my InnoSetup installer. If this option is chosen the program files are written to a folder off the users local settings application data folder, rather than C:\Program Files.

It seems that other admin users can still poke around and find this folder and therefore execute the app, which I want to avoid if the user is installing "just for me".

How do I specify that this folder (nominally {userappdata}\MyApp\Program Files\) has permissions removed for everyone except the user running the installer?

Answer 1

You can use cacls.exe or use the various permission directives. But no matter what you do, an administrators can always give themselves permission to access the file. They are administrators after all...