Allow programs to run only in certain folders

Preventing the execution of programs outside the authorised folders means that the propagation of malicious software is severely limited. It can be achieved by modifying the rights of folders/files.

Blocking the execution of programs in the 'Downloads' folder, or in the users' folders, means that infections due to software received by e-mail or downloaded from the internet (for example ransomware) can be avoided.