Yes, it's possible. You can set specific permissions to a folder to prevent execution of files. However, this doesn't guarantee full protection as some malware can change permissions. It's safer to use a sandbox or virtual machine for risky downloads.
I'm not sure about native, but there has to be some Windows controls you can use since most security tools are based on Windows internals.
Sorry not much help, your use case is kind of new. Have you considered using a VM without network activity/disable network adapter like VirtualBox or VMware?
I'm not sure about native, but there has to be some Windows controls you can use since most security tools are based on Windows internals.
Sorry not much help, your use case is kind of new. Have you considered using a VM without network activity/disable network adapter like VirtualBox or VMware?