Index: /trunk/src/VBox/Installer/win/Makefile.kmk
===================================================================
--- /trunk/src/VBox/Installer/win/Makefile.kmk	(revision 81183)
+++ /trunk/src/VBox/Installer/win/Makefile.kmk	(revision 81184)
@@ -433,4 +433,5 @@
 		-ext $(VBOX_PATH_WIX)/WixUIExtension.dll \
 		-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+		-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
                $(if-expr defined(VBOX_WITH_MSI_HACK),-ext $(MsiHack_0_OUTDIR)/MsiHackExtension.dll,) \
 		$(VBOX_MSI_ICE_IGNORE) \
@@ -453,4 +454,5 @@
 		'  -ext $(VBOX_PATH_WIX)/WixUIExtension.dll ^' \
 		'  -ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll ^' \
+		'  -ext $(VBOX_PATH_WIX)/WixUtilExtension.dll ^' \
                $(if-expr defined(VBOX_WITH_MSI_HACK),'-ext $(MsiHack_0_OUTDIR)/MsiHackExtension.dll ^',) \
 		'  $(VBOX_MSI_ICE_IGNORE) ^' \
@@ -490,4 +492,5 @@
 		-loc $(VBOX_WIN_INST_OUT_DIR)/NLS/License_$(lang).wxl \
 		-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+		-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
 		$(VBOX_MSI_ICE_IGNORE) \
 		-out $$@ \
@@ -504,4 +507,5 @@
 		'  -loc files-VirtualBox_$(lang)/License_$(lang).wxl ^' \
 		'  -ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll ^' \
+		'  -ext $(VBOX_PATH_WIX)/WixUtilExtension.dll ^' \
 		'  $(VBOX_MSI_ICE_IGNORE) ^' \
 		'  -out $$(@F) ^' \
@@ -640,8 +644,10 @@
 			-ext $(VBOX_PATH_WIX)/WixUIExtension.dll \
 			-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+			-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
 			-p$(VBOX_WIN_INST_OUT_DIR)/$(lang)/VirtualBox_$(lang).wix
 	$(VBOX_PATH_WIX)/candle.exe $(VBOX_WIN_INST_OUT_DIR)/$(lang)/VirtualBox_$(lang).wix \
 		-ext $(VBOX_PATH_WIX)/WixUIExtension.dll \
 		-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+		-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
 		-out $$@
  ifeq ($(lang),en_US)
@@ -679,4 +685,5 @@
 		'  -ext $(VBOX_PATH_WIX)/WixUIExtension.dll ^' \
 		'  -ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll ^' \
+		'  -ext $(VBOX_PATH_WIX)/WixUtilExtension.dll ^' \
 		'  -out $$(@F) || exit /b1' \
                ) \
@@ -784,8 +791,10 @@
 			-ext $(VBOX_PATH_WIX)/WixUIExtension.dll \
 			-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+			-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
 			-p$(VBOX_WIN_INST_OUT_DIR)/VBoxMerge$(module)_$(lang).wix
 	$(VBOX_PATH_WIX)/candle.exe $(VBOX_WIN_INST_OUT_DIR)/VBoxMerge$(module)_$(lang).wix \
 		-ext $(VBOX_PATH_WIX)/WixUIExtension.dll \
 		-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+		-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
 		-out $$@
  ifeq ($(lang),en_US)
@@ -823,4 +832,5 @@
 		'  -ext $(VBOX_PATH_WIX)/WixUIExtension.dll ^'\
 		'  -ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll ^' \
+		'  -ext $(VBOX_PATH_WIX)/WixUtilExtension.dll ^' \
 		'  -out $$(@F) || exit /b1' \
                ) \
@@ -936,4 +946,5 @@
 		-ext $(VBOX_PATH_WIX)/WixUIExtension.dll \
 		-ext $(VBOX_PATH_WIX)/WixDifxAppExtension.dll \
+		-ext $(VBOX_PATH_WIX)/WixUtilExtension.dll \
                $(if-expr defined(VBOX_WITH_MSI_HACK),-ext $(MsiHack_0_OUTDIR)/MsiHackExtension.dll,) \
 		$(VBOX_MSI_ICE_IGNORE) \
Index: /trunk/src/VBox/Installer/win/Permissions.wxi
===================================================================
--- /trunk/src/VBox/Installer/win/Permissions.wxi	(revision 81184)
+++ /trunk/src/VBox/Installer/win/Permissions.wxi	(revision 81184)
@@ -0,0 +1,23 @@
+<!--
+    VirtualBox Windows Installation Script (WiX)
+
+    Copyright (C) 2019 Oracle Corporation
+
+    This file is part of VirtualBox Open Source Edition (OSE), as
+    available from http://www.virtualbox.org. This file is free software;
+    you can redistribute it and/or modify it under the terms of the GNU
+    General Public License (GPL) as published by the Free Software
+    Foundation, in version 2 as it comes in the "COPYING" file of the
+    VirtualBox OSE distribution. VirtualBox OSE is distributed in the
+    hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
+-->
+
+<Include xmlns="http://schemas.microsoft.com/wix/2006/wix"
+         xmlns:util="http://schemas.microsoft.com/wix/UtilExtension">
+
+    <CreateFolder>
+        <!-- Allow read and execute rights for regualr users, only SYSTEM and Administrator have write rights. -->
+        <PermissionEx Sddl="O:SYG:SYD:P(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)" />
+    </CreateFolder>
+
+</Include>
Index: /trunk/src/VBox/Installer/win/VBoxMergeApp.wxi
===================================================================
--- /trunk/src/VBox/Installer/win/VBoxMergeApp.wxi	(revision 81183)
+++ /trunk/src/VBox/Installer/win/VBoxMergeApp.wxi	(revision 81184)
@@ -2,5 +2,5 @@
     VirtualBox Windows Installation Script (WiX)
 
-    Copyright (C) 2006-2016 Oracle Corporation
+    Copyright (C) 2006-2019 Oracle Corporation
 
     This file is part of VirtualBox Open Source Edition (OSE), as
@@ -21,4 +21,8 @@
     <?define VBOX_QT_INFIX="" ?>
 <?endif?>
+
+    <Component Id="cp_Permissions" Guid="9F6E9729-6490-4FBB-9EA1-03234E68907A" Win64="$(var.Property_Win64)" >
+        <?include Permissions.wxi ?>
+    </Component>
 
 <?if $(env.VBOX_WITH_DOCS_PACKING) = "yes" ?>
Index: /trunk/src/VBox/Installer/win/VirtualBox.wxs
===================================================================
--- /trunk/src/VBox/Installer/win/VirtualBox.wxs	(revision 81183)
+++ /trunk/src/VBox/Installer/win/VirtualBox.wxs	(revision 81184)
@@ -3,5 +3,5 @@
     VirtualBox Windows Installation Script (WiX)
 
-    Copyright (C) 2014-2016 Oracle Corporation
+    Copyright (C) 2014-2019 Oracle Corporation
 
     This file is part of VirtualBox Open Source Edition (OSE), as
@@ -15,5 +15,6 @@
 
 <Wix xmlns="http://schemas.microsoft.com/wix/2006/wi"
-     xmlns:difxapp="http://schemas.microsoft.com/wix/DifxAppExtension">
+     xmlns:difxapp="http://schemas.microsoft.com/wix/DifxAppExtension"
+     xmlns:util="http://schemas.microsoft.com/wix/UtilExtension">
 
     <?include Defines.wxi ?>
@@ -76,6 +77,5 @@
     <SetProperty Id="VBOX_REGISTERFILEEXTENSIONS" After="AppSearch" Sequence="both" Value="{}">
         <![CDATA[VBOX_REGISTERFILEEXTENSIONS="0"]]>
-     </SetProperty>
-
+    </SetProperty>
 
     <!-- Install the product for all users on the system -->
@@ -417,4 +417,7 @@
         <?endif ?>
 <?else ?>
+    <!-- Make sure to reference the permissions component, which takes care of setting
+         the required ACLs for our files / folders. -->
+    <ComponentRef Id="cp_Permissions" />
     <?if $(env.VBOX_WITH_QTGUI) = "yes" ?>
         <ComponentRef Id="cp_RegisterExtensions" />