Can I make only a specific user able to run a specific program in Vista (with UAC)?

Is it possible in Vista to make only one specific (unprivileged) user able to launch a specific program?

For example, I would like foo.exe (on a NTFS partition) to be executable only by user "John" and not by "Alan" and "Trudy". I don't care about the administrator account.

What is the easiest way to accomplish that?

 

Yes... just set the file permissions... right-click the .exe > Properties > Security tab > Edit... > Add... > Advanced... > Find Now > Select the username from the list > OK > OK
Then highlight that username and check the boxes for the privileges you want that user to have (such as execute).

Admins will still be able to run it... but not other standard users.

Be sure to do this with the actual .exe and not the shortcut.

EDIT: I just realized this probably isn't what you want... Does the program normally require admin privileges? Or does it normally execute fine as a standard user?

If it normally requires admin privs, then you'll need to elevate the permissions for that user...

I haven't tried this, but somebody has a sudo for Windows: http://sourceforge.net/projects/sudowin/

btw what does the program actually do that requires admin? In some cases it may be possible to give a standard user permissions to do that task... if it's just writing to a protected directory or something like that.

 

Thanks for your answer.

I don't think the program requires admin privileges. I have yet to install it on this laptop (just finished reformatting, reinstalling, cleaning and the such...), but it's Trillian, a messaging client. From what I remember it could be run by any user. Basically I (well her mother) do not want that the 10 yrs old sis of a teenager MSN addict could use that messaging program.
After the clean backup I'll install it and try your suggestion.

Shouldn't I also remove (or downgrade the running privilege) of the Authenticated Users Group?

BTW, this is Vista Home Premium I am talking about.


PS Thanks for the sudowin suggestion. It could come in handy in the future.

 

ok, I had to add every user and take away permissions from all of them but the one I wanted to use the program. But now it works.

Thanks.

 

Instead of that, I think you could've just edited the perms for the "Users" group to deny permissions... and any other groups besides Administrators. But... as long as it works, I guess.