On CLIENT3, open Windows Explorer as Administrator. Open properties for C:\Program Files and select the Security tab to view the DACL. Which "Allow" permissions are assigned to the Users group