I need to write a batch (.bat) file that will set read/write permissions and or passwords to certain executable programs on a windows system. Basically I want to be able to control who can edit things. Can any of you guys give me some tips on how to go about this or references so I can figure it out?

Would you need something like this or this ?

Yeah. I just dont understand programming all that well. I am trying to set up something that will allow people 'set up teks' access certain files, and maintenance teks to access those and other files and engineers to have global access. I have a crew of guys who arent supposed to be changing things doing so. I can't block them out completely but just need to figure a way of controlling who has access to what.

Apparently it can be done in a bat file that accesses Cacls. Just figured that out

http://ss64.com/nt/cacls.html

Now how would one write such a batch file. I got this off the web but it might as well be in Chinese:

@echo off

set zLog=ResetHomePerms.log

cls
echo FIXHOME.BAT
echo This script will reset permissions for all subdirectories
echo in this folder. It is assumed that the subdirectories
echo are named the same as their respective username.
echo.
choice /C YN /M “Are you sure you want to proceed?”

if errorlevel 2 GOTO :Exit
if errorlevel 1 GOTO :MAIN

:MAIN
if exist %zLog% del %zlog% >NUL

choice /C CF /M “Do you want users to have (C)hange or (F)ull control permissions?”

if errorlevel 2 GOTO ResetF
if errorlevel 1 GOTO ResetC

:RESETF
echo Granting users FULL permissions
echo.
echo Granting users FULL permissions >>%zlog%
for /f %%i in (‘dir /b /ad’) do @echo %%i >>%zLog% && echo y|cacls %%i /T /g Administrators:F >NUL && cacls %%i /T /e /g %userdomain%\%%i:F >>%zLog% && echo **********>>%Zlog%
REM rem out or modify the following line if you do not want to give Domain Admins Full control
for /f %%i in (‘dir /b /ad’) do @echo %%i >>%zLog% && cacls %%i /T /e /g “%userdomain%\Domain Admins”:F >>%zLog% && echo **********>>%Zlog%
goto :CLOSE

:RESETC
echo Granting users CHANGE permissions
echo.
echo Granting users CHANGE permissions >>%zlog%
for /f %%i in (‘dir /b /ad’) do @echo %%i >>%zLog% && echo y|cacls %%i /T /g Administrators:F >NUL && cacls %%i /T /e /g %userdomain%\%%i:C >>%zLog% && echo **********>>%Zlog%
REM rem out or modify the following line if you do not want to give Domain Admins Full control
for /f %%i in (‘dir /b /ad’) do @echo %%i >>%zLog% && cacls %%i /T /e /g “%userdomain%\Domain Admins”:F >>%zLog% && echo **********>>%Zlog%

goto :CLOSE

:CLOSE
echo. >>%zLog%
date /t >>%zlog% && time /t >>%zLog%
echo.
echo See %zlog% for details

set zLog=
set zLogError=

:EXIT
echo Exiting script

Why dont you set accounts for each of them with specific permissions. Then they will have access only to a certain files or programs.

Take a look at this or google similar I am sure it will be enough for the job