I don't add user to Guess group.  I do add user to USER group.  User group has read and execution but that's all.  On the program file permission, I grant the full privilege for that account, same thing for data, log and backups folder.  The user does not have to be an admin on the local box either.  I hope it works for you.

mom