Because of licensing restriction we have certain application that may only be started on specific workstations. So, we want any user that logs into that workstation to have that application.

So, I create the application object (msi distribution) an associate the specific workstations to it.
Now we comes the problem, it seems when I grant filerights to the folder on the server where the msi file resides, the rights are not inherited by the user who logs in to that workstation.

When i associate the user directly to the application object, the file rights are applied. But this is not what I want. I don't want to grant right to the user because than he/she can install it manually on any just by browsing to the msi file on the network.

The icon is visible, so the association with workstation works. Now how do I solve the file-right issue?