How to Let user excute but Prevent copy exe

Executing a file can only be done when reading is allowed (it's only logical?). Therefore, all the permission combinations you tried will fail one way or the other.

If you want to prevent you work to be stolen, change the .Net winform app to a webbased version (the only thing they can steal are screenshots). Behind the webserver, they can't get to the code to distribute somewhere else, only the input screens. The real code is protected.

You did most of the code already, now you only need to figure out how to display it in ASP pages.

You can not prevent it being copied.
The best you can do is prevent it being executed by an 'unauthorised' person.  How depends on your budget, how much you can change in code and 'is it worth my effort to do it'

We solved that once by using encryption that worked with dongles (Aladdin HASP) like this:
The exe would only work on computers where the dongle is inserted. So it can be copied to another machine, but there, execution fails without the dongle.

the users have some additional services on this station so the solution could be intranet ASP pages but it creates 2 additional problems:
1. the program have multiple thread and must restart the threads by the users,  how can i restart all the threads from the ASP page.
2. I prefer to not change the visual off the winform because of political problems, is there is solution , maybe to create  another winform (the same visual) which activate the main one?

Although this surely is some sort of solution, think about mine, too. If the exe is valuable, people might reverse engineer that behavior.
When we had that problem, the task was to protect a program that was said to be worth 200,000USD and we chose Aladdin HASP.