Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is the best way to have users run an application, on Windows Server 2003, referencing a configuration file without the users having permissions to read that configuration file? Any username and password with permission to view and/or edit the configuration file cannot be accessible to the users.

Thanks in advance,


share|improve this question

If the application is running in the context of the user and needs read access to the configuration file, there's no way to restrict the user from opening that file directly. It's just not possible. The user's account either has read access or it doesn't. The only way around this is to run the application in the context of another user.

It might be possible to give read access to the computer's account and have the application run in the SYSTEM context. Though, depending on the type of application, you may deem that to be a security risk.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.