(Windows) Need to limit access to one program

Question

I have a program written in Python. Its something that would be "distributed" to only a couple people. But the code is pretty valuable to me. Is there a way to give out laptops that will only give users access to this one program?

What are the possible issues with this? Is there a way to make this secure? The laptop will only be used for this program. It just needs standard functionality like keyboard/mouse/graphics and ability to connect to local network. Thats all it needs outside of running python and a couple python modules.

I found these replies, but they are about VNC and Remote Desktop:

• How to share only one window/application to other user in network?
• Restrict access to windows user account to only one program
• Are there any open source app virtualization solutions for Windows

Answer 1

The recipient will always be able to look at your program, if they try hard enough. You can try to obfuscate the code by compiling it to an executable, however smart people can decompile it. Always remember, once something leaves you control, someone else now has the control.

Answer 2

Given the limitations you have specified (no compiling and no remote server), the answer is "no", there is no way to guarantee your code cannot be read freely by anyone with access to the computer the code it running on.

Keltari at least touched on the issue: Even compiled, a sufficiently determined person can reverse-compile the code.

You can even lock a computer down into what is called "kiosk" mode which allows some control over what is allowed to run in the UI, but once again, a sufficiently determined person can still get at your code.

The only way to protect code that you consider as valuable as you appear to consider this code, is to not release it, or to use a server-side application and a separate client UI which does not allow access to the server except through protected and monitored channels.