Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to deny myself the ability to modify or delete an executable.

When .NET Reflector asks you if you want to update:

enter image description here

and you choose No it spontaneously deletes itself as retribution:

enter image description here

So I want to prevent myself from being able to Delete the executable; as punishment for their punishment.

I tried to Deny me Write permission (and deny it to Everyone, and Administrators):

enter image description here

Except, I can still Right-Click -> Delete the file...

How do I deny the delete/modify permission to a file?

share|improve this question
    
Yeah, write access has nothing to do with delete permission. This seems like a rather draconian way to solving this problem. – surfasb Jul 12 '11 at 18:33
    
i'm surprised at a downvote. i would think being able to stop something from modifying your files would be a useful question. – Ian Boyd Aug 29 '11 at 23:12
    
@surfasb Write access very well may have nothing to do with delete. i only include things i've tried because some people get grump when i simply ask the question. And some people will give spiteful downvotes if i don't "show research effort". – Ian Boyd Jan 15 '12 at 15:12
    
Upvote solely because I find the question quite amusing. Then I recalled painful times with the Adobe Flash installer and suddenly I feel less amused. – Mark K Cowan Nov 3 '14 at 11:05
up vote 3 down vote accepted

On Windows, it is enough to have one of:

  • "Delete" on the object, or
  • "Delete child" on its parent

Therefore a file will only become undeletable if you deny both.

Use icacls to edit the permissions:

  • Deny "Delete" to the file:

    icacls Reflector.exe /deny Everyone:(D)
    
  • Deny "Delete child" to the folder:

    icacls . /deny Everyone:(DC)
    

(Tested on Windows XP.)

share|improve this answer
    
Denying Modify permission also removes Execute permission; and i can still delete the file! – Ian Boyd Jul 12 '11 at 18:38
    
As I said, "You may also have to deny "Delete items" on the folder"... Which too can be done with icacls. – grawity Jul 12 '11 at 20:39
    
On the downside that would deny the ability to delete other items in the folder. Given that it doesn't seem to be working, i presume it is not possible to deny the ability to delete a file - deletes must happen against folders, rather than files. – Ian Boyd Jul 13 '11 at 2:25
    
Edit your answer to indicate that it cannot be done, "But here are some alternatives that might be useful", and you'll get the accept. – Ian Boyd Jul 13 '11 at 2:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .