up vote 1 down vote favorite
share [g+] share [fb]

Is there equivalent filesystem option on Windows like 'noexec' mount option on Linux? Is it the same if I set "Read" permission, but unset "Read & Execute" permisson on root directory (whole drive)?

link|improve this question
feedback

1 Answer

up vote 3 down vote

I believe that Noexec is a bit more specialised than that, however, if you clicked on the Advanced tab in security, then change objects through that, you have a lot more control

If you disable write abilities, you may be able to achieve something similar to what Noexec does, so it will still let programs run, but disable them from doing any sort of changes / writes.

alt text

As for your comment - you can manually add permissions for just folders -

alt text

link|improve this answer
Hm, it is not about writing, it is about executing. I want to know if I can disable any kind or possibility of running programs from data drive/partition, including not to be able to create it's own subdirectory and set execute permission on it. So user must be able to read and write, but not execute any programs, including BATs. – igustin Dec 2 '09 at 11:13
You may have problems as some programs need to be able to write. If I was you, I would look in to using the guest account as this should prevent anyone from making system wide changes. – William Hilsum Dec 2 '09 at 11:15
1) The picture above lists Traverse folder / execute file. 2) It is possible to create ACLs that would only apply to files, not folders. 3) "Deny" ACLs take precedence. – grawity Dec 2 '09 at 13:55
It is possible to add your own permission and select folders only - i48.tinypic.com/wk1fmh.jpg – William Hilsum Dec 2 '09 at 16:42
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.