Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is there equivalent filesystem option on Windows like 'noexec' mount option on Linux? Is it the same if I set "Read" permission, but unset "Read & Execute" permisson on root directory (whole drive)?

share|improve this question

1 Answer 1

I believe that Noexec is a bit more specialised than that, however, if you clicked on the Advanced tab in security, then change objects through that, you have a lot more control

If you disable write abilities, you may be able to achieve something similar to what Noexec does, so it will still let programs run, but disable them from doing any sort of changes / writes.

alt text

As for your comment - you can manually add permissions for just folders -

alt text

share|improve this answer
    
Hm, it is not about writing, it is about executing. I want to know if I can disable any kind or possibility of running programs from data drive/partition, including not to be able to create it's own subdirectory and set execute permission on it. So user must be able to read and write, but not execute any programs, including BATs. –  igustin Dec 2 '09 at 11:13
    
You may have problems as some programs need to be able to write. If I was you, I would look in to using the guest account as this should prevent anyone from making system wide changes. –  William Hilsum Dec 2 '09 at 11:15
    
1) The picture above lists Traverse folder / execute file. 2) It is possible to create ACLs that would only apply to files, not folders. 3) "Deny" ACLs take precedence. –  grawity Dec 2 '09 at 13:55
    
It is possible to add your own permission and select folders only - i48.tinypic.com/wk1fmh.jpg –  William Hilsum Dec 2 '09 at 16:42

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.