To view parent comment, click here.
To read all comments associated with this story, please click here.
//Yes you can. You can lock down the floppy, the CD-rom and USB.//
In one sense you can - you can make the floppy, the CD-rom and USB unreadable.
What I meant was that on a Windows system you cannot make it so that the media is readable, but applications won't run from the media. You cannot apply "NTFS security" to the content of a media that you did not yourself create. So if a user of a Windows system can read at all from a removable media, then that user can run portable apps.
BTW, what exactly is the point of having a floppy, CD-rom and USB on a Windows machine if you can't even read them?
PS: If I said there was a great new Linux distribution available, and it could do everything except unfortunately because of drivers it couldn't read the floppy, CD-rom and USB without root permissions ... I'd imagine NotParker would be the first one on here to post with howls of derision.
PPS: Actually, after I reviewed it, all of this was pretty clear in the original exchange:
"//With NTFS security I can remove the users right to execute a file if I choose from any folder I choose and make those settings inheritable if I choose.//
Yes. You cannot do this for a users own removeable media, however. All the user has to do is bring in a removeable media of their own, and if your Windows system allows that media to be read, then the user can put a portable app on that media and the Windows system will then run it. Happily."
NotParker it would appear is deliberately misrepresenting what others are saying.
Edited 2006-11-02 02:09







Member since:
2005-11-11
//Funny. My copy of McAfee 8.0 allows me to have a list of software that will not be allowed to execute.//
Won't stop a portable app. The app won't be on your list, and people can rename it anyway.
//With NTFS security I can remove the users right to execute a file if I choose from any folder I choose and make those settings inheritable if I choose.//
Yes. You cannot do this for a users own removeable media, however. All the user has to do is bring in a removeable media of their own, and if your Windows system allows that media to be read, then the user can put a portable app on that media and the Windows system will then run it. Happily.
As long as the media can be read, then users can run whatever portable apps they want to.
A Windows system that cannot read removeable media at all is not that useful, is it?