How to properly set permissions on a Windows Server 2012 folder?

Question

Access rights

In general, there is a separate folder with the program in the folder for each user, it is necessary for the user to restrict viewing the contents of this folder with its subfolders and files, but allow the launch and execution of this program. Is it possible to organize this.
PS Through the security tab, I forbade viewing the content for the user, but then the program also does not start.

Answer 1

In order to start / execute something, the system needs to receive certain commands. In order to receive these commands, she needs to read them. If the launch triggers the user - an attempt to read and execute commands from binaries occurs in the user's context, i.e. The user must have read permissions. Another question - what do you want to get after execution? If you need an instance of some kind of software running in the system, to which "clients" are knocking, and you do not need any interactive interaction of the launching user with this software, then you can look at creating a bat / ps1 script or scheduler that will run on behalf of the service UZ or system, and the user will trigger the launch.

Answer 2

If you are doing this in an attempt to prohibit copying, then all in vain.
"Reading and execution" - the most maximum.

Answer 3

it is necessary for the user to restrict viewing the contents of this folder with its subfolders and files, but allow the launch and execution of this program.

Impossible!
Startup and execution is reading, copying into memory and then executing.
If you limit reading - forget about launching.
Consider running the program as a different user - if the program doesn't have a user interface, you'll be fine.

Answer 4

Well, how can you prevent copying the program?

Make a "launcher" that will load the program from a place inaccessible to the user.