Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to change the permission on a file so that other users could execute it, but they can't read or copy the file to another place. I think you could do something like this on a Linux machine by using chmod +x and -r. Could one do this in WinXP using the access control available?

share|improve this question
Yes, you can, using NTFS file permissions. Gortok is right, though. – Greg Hewgill Jun 11 '09 at 1:27

You can try enabling the Traverse Folder/Execute File permission (need to go to Advanced display in the file security properties). At the same time disable read permission. I haven't confirmed this, but give it a go and let us know if it works.

share|improve this answer

Yes this is possible. As 20th Century Boy states, you can grant Traverse/Execute permissions under advanced permissions.

This can cause other problems for executing the program, that can cause it to crash, but it will attempt to run. Certain parts of the executable will be unavailable, such as its icon, compatibility information, etc, but it will still execute. If the executable contains information that it needs to access while running, this can cause the application to become unstable.

share|improve this answer

This used to be possible in Novell Netware, although these days I don't see an analog in NTFS file permissions.

I did just test --x permissions on a linux box and while it works with ELF binaries it's unlikely to work with scripts.

share|improve this answer

Doesn't look like it's working for me. I only see the file read+executable permission. And when I set it to not readable, I can't execute anymore. Will check some other combination of the other options in the advanced display.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.