Click here to get back home

execute but no copy or read

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
execute but no copy or read Holger Spindler 04-26-2006
Posted by Holger Spindler on April 26, 2006, 2:58 am
Please log in for more thread options
Hello,

i'm searching for a special possibility to adjust users rights in AD.
The users have to execute batch files but mustn't read or copy the batch
files.
Background is that there are passwords in the batch files, users shall not
read them.

If this is not possible, do somebody know a program, that compile the batch
files to exe files and encrypt them? I have tryed bat2exe, but users can
read plaintext if they open the exe with an editor.

The batch files are saved on an win2003 Server

--
Holger Spindler
Landwehr
Computer u. Software GmbH
Tel.: 05908-938-311 Fax: 05908-938-103



Posted by Miha Pihler [MVP] on April 26, 2006, 4:25 am
Please log in for more thread options
Hi,

If you require users to execute a program (batch files) they need read
permissions on these files.

You can try this tool that might help you solve the problem of clear text
password in batch file...

CPAU
http://www.joeware.net/win/free/tools/cpau.htm

--
Mike
Microsoft MVP - Windows Security

> Hello,
>
> i'm searching for a special possibility to adjust users rights in AD.
> The users have to execute batch files but mustn't read or copy the batch
> files.
> Background is that there are passwords in the batch files, users shall not
> read them.
>
> If this is not possible, do somebody know a program, that compile the
> batch
> files to exe files and encrypt them? I have tryed bat2exe, but users can
> read plaintext if they open the exe with an editor.
>
> The batch files are saved on an win2003 Server
>
> --
> Holger Spindler
> Landwehr
> Computer u. Software GmbH
> Tel.: 05908-938-311 Fax: 05908-938-103
>
>



Similar ThreadsPosted
Execute access to files from Terminal server August 3, 2007, 2:17 pm
Copy all ACLs from one folder to copy February 21, 2008, 2:46 am
Big (please read HUGE) problem in the network October 12, 2007, 5:16 am
Why Are List Folder / Read Data Combined? November 21, 2005, 10:45 pm
"Read-Only" branch office domain controllers? April 20, 2006, 2:34 am
Unable to read any security database file February 7, 2007, 2:31 pm
ACLs - Users with READ can MOVE a whole folder? April 11, 2007, 10:45 am
Permissions for all of group to read, only creator can modify October 3, 2007, 8:58 pm
Read-Only Access to the entire server - everything , not just the Files & Folders October 23, 2005, 8:12 pm
Read-only access to AD, 2000, and 2003 server for monitoring? September 7, 2007, 3:20 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap