Avatar of center1010
center1010
 asked on

How to Let user excute but Prevent copy exe

I have server on the cloud that uses as work station,
I have users which I allow to work on the station with .NET winform APP
That I wrote.
I want to let them use the EXE but prevent them from copy it (and send it by system ftp or http or Gmail)

I try give the users –traverse folder/execute file deny read –not good
Tried lots of permission combination –not good

The server is : windows server 2008 R2 datacenter


Maybe some group policy
Even if there is some recommended professional  tool to  buy
.NET ProgrammingWindows OSMicrosoft Legacy OSWindows Server 2008Active Directory

Avatar of undefined
Last Comment
McKnife

8/22/2022 - Mon
Kimputer

Executing a file can only be done when reading is allowed (it's only logical?). Therefore, all the permission combinations you tried will fail one way or the other.

If you want to prevent you work to be stolen, change the .Net winform app to a webbased version (the only thing they can steal are screenshots). Behind the webserver, they can't get to the code to distribute somewhere else, only the input screens. The real code is protected.

You did most of the code already, now you only need to figure out how to display it in ASP pages.
AndyAinscow

You can not prevent it being copied.
The best you can do is prevent it being executed by an 'unauthorised' person.  How depends on your budget, how much you can change in code and 'is it worth my effort to do it'
ASKER CERTIFIED SOLUTION
Kimputer

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
McKnife

We solved that once by using encryption that worked with dongles (Aladdin HASP) like this:
The exe would only work on computers where the dongle is inserted. So it can be copied to another machine, but there, execution fails without the dongle.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
center1010

ASKER
the users have some additional services on this station so the solution could be intranet ASP pages but it creates 2 additional problems:
1. the program have multiple thread and must restart the threads by the users,  how can i restart all the threads from the ASP page.
2. I prefer to not change the visual off the winform because of political problems, is there is solution , maybe to create  another winform (the same visual) which activate the main one?
McKnife

Although this surely is some sort of solution, think about mine, too. If the exe is valuable, people might reverse engineer that behavior.
When we had that problem, the task was to protect a program that was said to be worth 200,000USD and we chose Aladdin HASP.