This forum is closed. Thank you for your contributions.
Aaron Parker has once again identified something undocumented that has great practical use;
http://blog.stealthpuppy.com/deployment/setting-app-v-client-permissions-during-install "The following table lists the permissions that you can modify by passing parameters to Setup or via Windows Installer" /Znack
