How to make a shortcut's folder inaccessible but executable?

[ReeQo]

as title said, is there anyway to do so?

i have a cyber cafe and planned to renew it.
so i want to make a folder that customers can't access but the file is executable/launchable through its shortcut.

let's say i have a game shorcut called Assassin Creed, i want to make this game executable through shortcut but the directory won't accessible if they decide to explore it. so they won't mess up its folder's contents or the game itself.

i've searched entire forum & google and didn't specifically find it, not sure i've tried hard enough.

big thanks in advance.

sorry for bad grammars.

 

[ShoTTaS]

Hi ReeQo, welcome to SevenForums

As far as i know, .exe shortcuts will not run if the target folder is not accessible by the current user.

How about installing Deep Freeze, this help you restoring your system after every reboot.
And securing a system image of your workstations, in case some users intend to destroy your windows.

 

[ReeQo]

thanks for reply ShoTTaS

i see, so thats not possible to do.

currently i'm using Shadow Defender, a program similar to Deep Freeze.
i decided to put Game folder to exclusion list so i won't put too much efforts and time to enabling-disabling it to patch the games.

well, i'll find another way to resolve this.

thanks for your suggestion, i appreaciated it.

 

[logicearth]

You don't need to do anything. Simply make sure the user account that the users are using is the guest account. They could explore the directory all they want, but won't have permission to change anything.

That is what user account, groups, and permissions are for.

 

[ShoTTaS]

There are games that needs to have an admin rights for it to run properly, that is why guest log.in is not used in cyber cafes.

 

[Pyprohly]

Not sure how fluent you are with your NTFS permissions, ReeQo, for you to be able to do this, but it sounds like what you want to do is to first disable inheritance for the executable in question (the one that the shortcut will point to) and set the permissions of this executable to allow the User group read access. Then deny modify rights for the Users group on this folder that contains the executable.

The above is if you're planning to set up a standard user for users to use.

However, I highly recommend taking Logicearth's advice alone: simply let users use the builtin Guest account. Less maintenance involved. Things will be safe this way.

There are games that needs to have an admin rights for it to run properly, that is why guest log.in is not used in cyber cafes.

Would you like to give an example of such "game"? If Internet cafes doen't use the Guest account, what sort of account do they use then? And no, a standard account doesn't have 'admin rights'.

Allowing random users elevated rights is a big mistake.