Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is it possible (if so, how?) to deny execution permission for a single file, for a user (or group), but keep read and write permissions?

When I deny "Read & Execute" in the interface, "Read" is also denied.

I am specifically asking about files, not directories.

Home premium, SP 1

share|improve this question
add comment

2 Answers

Windows file permissions don't allow for a case wherein the user may read and write but not execute a given file.

Referring to the table here, you can see that no file permission simultaneously grants read/write access while denying execute access.

share|improve this answer
    
I'm not sure what that table is supposed to mean - it appears to relate the basic permission set to the advanced permission set - but you can certainly configure permissions that allow a file to be read but not executed. –  Harry Johnston Jan 31 '13 at 20:59
add comment

Go to the Advanced interface (select Advanced rather than Edit on the Security tab) and you can set the individual access rights.

Or, from a command line:

icacls file.exe /deny Everyone:(X)
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.