Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible (if so, how?) to deny execution permission for a single file, for a user (or group), but keep read and write permissions?

When I deny "Read & Execute" in the interface, "Read" is also denied.

I am specifically asking about files, not directories.

Home premium, SP 1

share|improve this question

Go to the Advanced interface (select Advanced rather than Edit on the Security tab) and you can set the individual access rights.

Or, from a command line:

icacls file.exe /deny Everyone:(X)
share|improve this answer

Windows file permissions don't allow for a case wherein the user may read and write but not execute a given file.

Referring to the table here, you can see that no file permission simultaneously grants read/write access while denying execute access.

share|improve this answer
I'm not sure what that table is supposed to mean - it appears to relate the basic permission set to the advanced permission set - but you can certainly configure permissions that allow a file to be read but not executed. – Harry Johnston Jan 31 '13 at 20:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.