Stupid file locking question

[blkntan]

Trying to lock a batch file to execute only permissions (easy in UNIX)so that the users can execute the batch file but not read or change it. Tried special permissions and allow transverse folder/execute file and deny everything else, but windows adds read permissions after I hit apply. Any ideas?

 

[jrbarnett]

You can add an explicit Deny Write permission to it to stop your users changing the file, but it wouldn't stop them opening the file in Notepad and viewing the contents, so its only a partial solution.

John

 

[blkntan]

Unfortunately I want/need to keep them from reading it too.

 

[jrbarnett]

Could you have one batch file which uses RunAs to execute the other batch file as a second user. The primary user accounts need no rights to access the file altogether.

I don't know of any other way in which you could wholly accomplish your task. As batch files are executed within the security context of the user that runs them, the operating system must be able to read the batch file in order to interpret and execute it.

John