Attemping to open just about any file using a different shell to Explorer (namely cmd) causes the firewall to ask for permission before the file can be accessed. Is there not an easier way of doing things - maybe validating the instance of the shell the first time it tries to access a file, rather than requesting permission on each and every occasion that the shell tries to access a different file?