Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 560616" data-attributes="member: 50782">I added a deny &quot;traverse folder/execute file&quot; for Everyone in all users folders (except in Temp, because I use this to install programs from with right cluck run as Admin). ACL does (like SRP) blocks the execution also (ACL access deny messsage in Dutch)[ATTACH=full]121349[/ATTACH]Inherited ACL deny execute file/traverse folder for Everyone on newly created folder elesewhere (weigeren = deny)[ATTACH=full]121351[/ATTACH]Because I use default level Basic User with an acception for Administrator, the Temp folder is the only folder where it is possible to use right &quot;Run as Administrator&quot;. When I click on an executable it is blocked by SRP. In UAC I have removed the Windows Installer reconition (to prevent elevation) and set UAC to block elevation of unsigned executables (so it sort of mimics the AppGuard blocking behaviour in default mode in user folders).Messing with ACL&#039;s (Access Control List) are an easy way to brick your system, so handle with care (make a backup of ACL&#039;s first). When you don&#039;t know how to backup and restore ACL&#039;s don&#039;t mess with them!</blockquote>

[QUOTE="Windows_Security, post: 560616, member: 50782"] I added a deny "traverse folder/execute file" for Everyone in all users folders (except in Temp, because I use this to install programs from with right cluck run as Admin). ACL does (like SRP) blocks the execution also (ACL access deny messsage in Dutch) [ATTACH=full]121349[/ATTACH] Inherited ACL deny execute file/traverse folder for Everyone on newly created folder elesewhere (weigeren = deny) [ATTACH=full]121351[/ATTACH] Because I use default level Basic User with an acception for Administrator, the Temp folder is the only folder where it is possible to use right "Run as Administrator". When I click on an executable it is blocked by SRP. In UAC I have removed the Windows Installer reconition (to prevent elevation) and set UAC to block elevation of unsigned executables (so it sort of mimics the AppGuard blocking behaviour in default mode in user folders). [COLOR=#ff0000][B]Messing with ACL's (Access Control List) are an easy way to brick your system, so handle with care (make a backup of ACL's first). When you don't know how to backup and restore ACL's don't mess with them![/B][/COLOR] [/QUOTE]

Verification