Running unreliable third-party software

Question

What is the best way to protect system integrity when launching possibly malicious third-party executables?

I want the program to be able to store some information for its own use at runtime, but to deny access to the network and devices, and, of course, to the data of other users and the general system.

Several limitations: 1. This is necessary for working in Windows. 2. I cannot restrict the language (for example, "just use Java"). 3. It should have its own or almost own performance. 4. Ideally, it should run in the background as a service.

Is it possible to just use a windows user with limited rights? Would it be safe?

Do I need to use a virtualization environment? Are there any free ones?

Other ideas?

Answer 1

Sandboxie may be the first solution. Very easy.

Setting up an account with restrictions may also work. But you should still be aware of some issues depending on what you are using.

VMs are also pretty fast nowadays.

Answer 2

A virtual machine using Virtual PC 2007 sounds like a good way to come to me - it has been free for a while, and I used it for the last 4-5 years without any problems

Download here

Answer 3

Although this is not an ideal solution for what you get, I have a few options that I have used in the past.

1.) Use a virtual environment. I personally prefer VMWare after using it for whiel ($ 189), as it works well and is easy to work with. This at least isolates the application on the test bench, which you can use to convince him and see if it does something bad.

2.) Use a limited account in Vista or others, this will at least prevent its access to critical files, however it is not foolpoof!

change

I will also add a recommendation that if you are really scared, DO NOT put the virtual machine on your network.