diff --git a/scripts/Common/Scripts/Operations.ps1 b/scripts/Common/Scripts/Operations.ps1
index ee0d703b..7487a379 100644
--- a/scripts/Common/Scripts/Operations.ps1
+++ b/scripts/Common/Scripts/Operations.ps1
@@ -135,6 +135,7 @@ $null = New-Module {
         }
         catch {
             Set-Content -Path $errorPath -Value $Error;
+            Set-UserPermissions $errorPath;
         }
         finally {
             Set-Stage ([SetupStage]::Idle);
diff --git a/scripts/Windows/Scripts/Security.ps1 b/scripts/Windows/Scripts/Security.ps1
index 0256c28b..e1f62912 100644
--- a/scripts/Windows/Scripts/Security.ps1
+++ b/scripts/Windows/Scripts/Security.ps1
@@ -55,7 +55,13 @@ $null = New-Module {
             [FileSystemAccessRule]::new(
                 [SecurityIdentifier]::new([WellKnownSidType]::BuiltinUsersSid, $null),
                 [FileSystemRights]::FullControl,
-                [InheritanceFlags]::ObjectInherit -bor [InheritanceFlags]::ContainerInherit,
+                (& {
+                    if (Test-Path -PathType Container $Path) {
+                        [InheritanceFlags]::ObjectInherit -bor [InheritanceFlags]::ContainerInherit
+                    } else {
+                        0
+                    }
+                }),
                 [PropagationFlags]::InheritOnly,
                 [AccessControlType]::Allow));