I can recommend the Standard User Analyzer tool included with the Application Compatibility Toolkit[^]. It is a kind of a debugger, that monitors all the calls the application does and verifies it doesn't break standard user priviledges. Btw. there is a standard directory for storing application settings and logs. See also SHGetFolderPath(NULL, CSIDL_COMMON_APPDATA,...)[^]