Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 951855" data-attributes="member: 32260">What do you mean by &quot;secure folders&quot;? If these are folders that can be protected by Controlled Folder Access (CFA), then Update Mode already blocks execution in all folders that can be protected by CFA (like Documents, Pictures, Videos, etc). Normally, you cannot add the AppData subfolders to the folders protected by CFA (except when unhiding the hidden folders in Explorer). The AppData subfolders are not intended to store users&#039; data, but only the user-dependent settings of applications. Normally, these settings are available to users only via installed applications. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />The situation is slightly different when the system/software has got popular vulnerabilities and can be exploited. Such a situation is probable on Windows 7 and unsupported Windows versions. That is why in the Recommended_Settings on Windows 7 (Vista), the &lt;Update Mode&gt; = OFF.I must consider all cons and pros of unblocking only a temporary folder in the User Profile. As I have already said, it can be useful on Windows 7 (or vulnerable machine). The idea of using it is rather for releasing the restrictions on Windows 7 than restricting Update Mode on Windows 10.</blockquote>

[QUOTE="Andy Ful, post: 951855, member: 32260"] What do you mean by "secure folders"? If these are folders that can be protected by Controlled Folder Access (CFA), then Update Mode already blocks execution in all folders that can be protected by CFA (like Documents, Pictures, Videos, etc). Normally, you cannot add the AppData subfolders to the folders protected by CFA (except when unhiding the hidden folders in Explorer). The AppData subfolders are not intended to store users' data, but only the user-dependent settings of applications. Normally, these settings are available to users only via installed applications. :unsure: The situation is slightly different when the system/software has got popular vulnerabilities and can be exploited. Such a situation is probable on Windows 7 and unsupported Windows versions. That is why in the Recommended_Settings on Windows 7 (Vista), the <Update Mode> = OFF. I must consider all cons and pros of unblocking only a temporary folder in the User Profile. As I have already said, it can be useful on Windows 7 (or vulnerable machine). The idea of using it is rather for releasing the restrictions on Windows 7 than restricting Update Mode on Windows 10. [/QUOTE]

Verification