I run Windows 10 and I would like the contents of my system default "Downloads" folder to be non-executable. I want at least for a landing zone where I can scan files, run hash checks, and so on.
Does this sound right?
Change the SYSTEM (and my own) permissions on that folder to eliminate "READ AND EXECUTE" while leaving READ intact.
I want to have to move files out of there in order to do more. (The user is always the biggest threat, so let's throw a stumbling block in my -- er "his" way.)
I am not looking for mathematical rigor - I just want a common-sense, easily obtainable LZ, and I would like for it to be the existing Downloads folder that the system recognizes.