Using cacls to set permission on executables

How exactly is it possible to restrict read and execute permiss开发者_如何学Pythonions of a file, and leave everything else in tact. So you can't open the file, although you can do things like move it and delete it etc.

cacls only supports basic permissions. To change extended permissions from a command-line you will need to use xcacls.vbs or something similar. I only just found this when I searched MSDN, but it should do what you what. Information on the use of the script can be found in this documentation