I have an application which installs via Windows Installer. During the install, I want to restrict access to "System, Administrators and Creator Owner". I am able to block inheritance on the destination directory, and set the above permissions, however, because of UAC/LUA on Vista and above systems, the start menu shortcut and desktop shortcut cannot run correctly, since the interactive user is running with a split token, effectively making the directory inaccessible. It seems as though the only workable solution is to provide users "List Folder Contents" rights, which is effectively GENERIC_READ | GENERIC_EXECUTE rights. This defeats the purpose of preventing user access to the folders, where any logged on user could potentially load dll's in the program directory for malicious purposes. Thus the reason for preventing user access. Is anyone aware of a way to allow the short-cut to remain valid without allowing users read/execute permissions to the folder? Thanks in advance Nick

Hi, Please try to create on depend task in Task Scheduler and create shortcut for the task. Then put the shortcut into the Start Menu of correct users. For details information, Please refer to the following link. http://blogs.techrepublic.com.com/window-on-windows/?p=730 Important Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.