> > In terms of permission I can use icacls to make the changes can't I? >
I'm lucky to have some installer CAs written in C# so I tweak permissions in code. You could shell-out to the icacls command, but be careful with timing and command arguments. I forgot which of cacls utilities was the most modern, but a search quickly revealed that icacls is -- *GK* *Currently, you can use the Xcacls.exe utility, the Cacls.exe utility, and the Xcacls.vbs utility to modify NTFS permissions in Windows Server 2003. The Icacls.exe utility is an alternative option for modifying NTFS permissions. The Icacls.exe utility resolves various issues that occur when you use the existing utilities.*