I have an app that installs on XP and Vista. The installer of course runs as Admin.
I want to force a folder C:\programdata\OurApp and all subfolders so that the users group has all permissions (although they don't need to change permissions, just more-or-less full end-user functions: list folder, delete, create, read, write files and folders). I understand that the command that would do this has to be run with admin privileges.
I seem to be having a problem with inheritance (which I don't really understand anyway, in spite of considerable reading online). If I set the permissions for users to full, but then create a file as an admin, users don't have full rights on the file, but I want them to. I don't want some admin running our app once and by doing so creating files that admin owns and users don't have full access to.
I've tried a variety of command lines without success to force the users group to have all rights on all files and folders (current and newly created) in a tree:
icalcs c:\programdata\OurApp /T /C /Grant Users:(OI,CI,MA)
calcs c:\programdata\OurApp /T /C /E /G Users:F
Can I use calcs in Vista, or (since it's deprecated) should I use icalcs there for this operation?
Can I use icalcs in XP?
Would using xcacls (which I just learned of here at ee) be appropriate on Vista and XP, or is it too deprecated? If it's the appropriate solution, what's the command line?
Can these commands be run on the directory tree on a Microsoft server that the app is installed on, or just a local drive?
Any help would be greatly appreciated.