This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 83%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Dear All,
we've got a software developed using .net and installed using an administrator profile on a Windows 10 client in a domain.
On the first execution, an xml configuration file has been created in c:\programdata..\filename.xml with the same administrator user's profile.
If we try to edit the xml file with another user's administrator profile, we are asked to save another file because the update of the existing one is not permitted.
We are able instead to update the file executing notepad from an administrator powershell session, but we need that all administrators's group users on the client can edit and save the file.
Please, we need support to solve this problem, any suggestion is really appreciate.
Thanks and kind regards.
Roberto
When UAC is enabled members of the Administrators group will be treated just like standard users with respect to the access permissions for the ProgramData folder and any subfolders when these file system locations are accessed from an un-elevated process.
Dear RLWA32,
thank yuo very much for your reply.
We've tried to run our applications using "run as administrator" option on the .exe file, unfortunately the xml file cannot be updated also in this case.
I suppose, if possible, we have to disable UAC in I will investigate with the customer system administrator, but any other suggestions to solve the problem will be really appreciate. For example, we could change the .net code and the installation file if you or someone else could kindly give us instruction.
Kind regards.
Roberto
We are able instead to update the file executing notepad from an administrator powershell session...
In your initial question you wrote the above. Subsequently, when responding to my comment you wrote
We've tried to run our applications using "run as administrator" option on the .exe file, unfortunately the xml file cannot be updated also in this case.
These two statements seem contradictory to me. Can you post an image of the Advanced Security Settings for the xml file and the containing folder so that we can better understand the circumstances? For example, File Explorer shows the advanced security settings for my ProgramData folder below. Notice that the Administrators group is granted Full Control --
You're right, It sounds the same to me!
I've checked that we did run as administrator on the shortcut, not directly on the .exe file.
The advanced security settings of the xml file are right, we have the client\administrators group with full control permission on the file and this is inheritade from c:\programdata folder.
I've observed instead that the xml owner is an administrator of the client and not the SYSTEM like your configuration, but I don't know if this could be the problem.
Thanks again and regards.
Roberto
SYSTEM just happens to be the owner of the ProgramData folder. You haven't given me enough information to diagnose your issue but maybe the following will help you.
I created two subfolders underneath ProgramData. One was created by an Administrator account from an elevated command prompt and a text file was created in the subfolder by an elevated process (notepad). The second subfolder was created by an Administrator account from an unelevated command prompt and contains a text file created by notepad (unelevated).
Note the differences in the security applied to the two subfolders and the files they contain.
Subfolder and file created by elevated processes -
Subfolder and file created by unelevated processes -
You have been really polite, I didn't upload screenshot for privacy.
I really appreciate your help, we installed the software using an administrator account without elevated privileges, this assign the ownership to this account. The software instead has been run with another user, member of administrators group but not same of the installation one.
I suppose we will run the installation in elevated manner and execute the software with the same method.
Many thanks again for your support and best regards.
Roberto
but we need that all administrators's group users on the client can edit and save the file.
That's the way it works, any modification of file located in "Program Files" requires admin permission; don't try to change it, it will fail.
Save the config file instead in ProgramData folder:
https://learn.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-folderlocations-programdata
Dear OlafHelper,
thank you very much for your reply, unfortunately we are already working with the c:\programdata folder and the problem in with an xml file in a subfolder of this one. Any other suggestions will be really appreciate.
Kind regards.
Roberto