Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

What is the best way to have users run an application, on Windows Server 2003, referencing a configuration file without the users having permissions to read that configuration file? Any username and password with permission to view and/or edit the configuration file cannot be accessible to the users.

Thanks in advance,

Ben

share|improve this question

1 Answer 1

If the application is running in the context of the user and needs read access to the configuration file, there's no way to restrict the user from opening that file directly. It's just not possible. The user's account either has read access or it doesn't. The only way around this is to run the application in the context of another user.

It might be possible to give read access to the computer's account and have the application run in the SYSTEM context. Though, depending on the type of application, you may deem that to be a security risk.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.