Is it possible (if so, how?) to deny execution permission for a single file, for a user (or group), but keep read and write permissions?

When I deny "Read & Execute" in the interface, "Read" is also denied.

I am specifically asking about files, not directories.

Home premium, SP 1


Go to the Advanced interface (select Advanced rather than Edit on the Security tab) and you can set the individual access rights.

Or, from a command line:

icacls file.exe /deny Everyone:(X)

Windows file permissions don't allow for a case wherein the user may read and write but not execute a given file.

Referring to the table here, you can see that no file permission simultaneously grants read/write access while denying execute access.

  • I'm not sure what that table is supposed to mean - it appears to relate the basic permission set to the advanced permission set - but you can certainly configure permissions that allow a file to be read but not executed. – Harry Johnston Jan 31 '13 at 20:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.