On my Win7 Pro x64 system, I would like to run a program I have 99% confidence in (specifically, Blitzgewitter by Titan). However, on the off chance of a trojan, I would like to run it in a sandboxed user account.
What are the minimum necessary permissions for a user account (say, "scener") to login, download the file to
%USERPROFILE%, and run it? I'd appreciate any advice before I start trying something since I don't want to get into login failures.
I have two thoughts:
Remove scener from the Users group and set Allow Read for scener on C:\Windows and C:\Program Files, Allow RW on
%TEMP%, and Allow All on C:\users\scener.
Leave scener in the Users group but Deny everything except R on C:\Windows and C:\Program Files and RW on
What say you?