Ruhiges IT-Forum

Code: Alle auswählen

Subject: Installation path recommendation – conflict with security best practices

Dear Support Team,

I hope this message finds you well.

While reviewing your installation documentation, I noticed that you recommend not installing your software in the “Program Files” directory due to potential permission issues.

However, according to security best practices and government cybersecurity agencies — such as ANSSI (the French National Cybersecurity Agency) and similar organizations like NIST (U.S. National Institute of Standards and Technology) and ENISA (European Union Agency for Cybersecurity) — it is strongly recommended that applications be installed in system-protected directories such as Program Files.

In professional environments, execution of binaries is restricted to trusted paths (e.g. C:\Program Files and C:\Program Files (x86)) to prevent the execution of untrusted or potentially malicious code.
This policy is commonly enforced through application whitelisting and endpoint security controls, which are standard practice in enterprise and government environments.

Would it be possible for you to review your installation process or adjust your software so that it can safely run from within Program Files while maintaining proper permission handling ?

This change would greatly facilitate deployment in secured and compliant environments.

Thank you for your attention, and please let me know if you would like more details about these compliance requirements.

Kind regards,