diff --git a/manifests/config.pp b/manifests/config.pp
index 7cbd1b2a..7bd53599 100644
--- a/manifests/config.pp
+++ b/manifests/config.pp
@@ -75,7 +75,9 @@
   }
   -> case $::osfamily {
     'Windows': {
-      concat { "${puppet_dir}/puppet.conf": }
+      concat { "${puppet_dir}/puppet.conf":
+        mode  => '0674',
+      }
     }
 
     default: {