uses CommonApplicationData folder now to prevent Authorization issues