Thanks Neil. Yeah they can access the directory but aren't allowed to open anything. If I run them as admin, they can access wbconfig. However, applying a skin gives me the loading dialogue for about the right amount of time but noting actually changes.
In the interm, I rolled back to 4.6. Limited users can change skins if they go through display properties but not using wbconfig. Something got screwed up in the rollback. sigh