Does anyone know if it's possible to lock down Windows 10 Home to not allow anything to run without permission from the user? If so, my thought is that this would be an effective way to prevent any kind of malware/virus/etc. from doing any damage...thoughts?
Hi, do you mean whitelisting? (That is, anything not whitelisted requires user approval).
Yes, using a 3rd party program - as far as I've seen these are commercial.
Recently I started using SecureAPlus, which I got as a giveaway offer.
Free Cloud Antivirus Application Control for PC | SecureAPlus
- also a multi-engine cloud AV
It has given me a few prompts e.g. when installing new software but has been very quite, no apparent overhead. I have reported 3 BSODS when approving a file related to Avast- not happened for days now though. Support has been responsive.
Even that will not necessarily block all malware, of course, but an interesting added layer.
(I also have CyberReason RansomFree, Cryptoprevent and Bitdefender's free Antiransomware)
On a completely different track, use disk imaging routinely to external storage. Helps you recover from disk failure, ransomware, unbootable PC, user error.... perhaps even cosmic rays.
If you are going to approve each and every action before it is allowed to do its thing, my guess is that you're going to tire of doing that after the "honeymoon/new thing" week.
No it's not like that. When the program is initially installed, you can set it to approve everything that already exists.
So it's very quiet. Much quieter than UAC.
Quote