user rights to run a .exe file

[IainM]

Hi,

Does anyone know the best way to give a user the rights to run certain
executable files but not others on their machines in a domain. By default a
user cannot run executable files.

Cheers,
Iain

 

[Steven L Umbach]

Well that is not really true. They can run files that they have
read/list/execute permissions to which would be just about everything in a
default installation in the \program files folders structure. There may be
certain .exe files in the \winnt\system32 folder they can not run because of
the need for administrator rights, but in general they can run .exe files
that they have/read/list/execute permissions to. Do you mean install
software perhaps? --- Steve

 

[IainM]

Cheers Steve,

Yes, the users can run software that has been installed under an
administrative account, the problem is some of them are trying to run exe
files that come on their usb memory sticks to encrypt the data. when they
try to run it access is denied.The exe file allows resides on the memory
stick and allows them to partition the stick into encrypted and public
areas, and to enter their password to access the encrypted area. An
administrative account can run this but a power user can't. I know that in
the policies that you can set which exe files users can access but I don't
want to have to start to itemise all the files that they have access to I
just want to say users X and Y can run aaaa.exe from their memory stick!

Any thoughs?

Regards
Iain.

 

[Steven L Umbach]

There is no easy way to do such. You would have to use tools like filemon
and regmon from SysInternals to see where a regular user is being denied
access and then give the user appropriate permissions and try again. --
Steve