Windows Template VMs, Windows AppVMs, and Windows Updates

[enmus]

@GWeck

Combining your and my test results leads to the conclusion that, in Windows, you will get good protection via the template mechanism if and only if the Move User Profiles option is used during QWT installation.

Maybe it looks unclear, but this is how I “hardened” Win7 qube in addition.

Testing Windows and QWT in R4.1

Thanks for the response. Never, ever it is allowed to user to write/execute to/from Q: Always, it can execute from C: (writing to it is disposable anyway). When I want to write and execute, it hast to be on/from external storage and in template based AppVM. I’m not hiding, and sys-firewall is default VM. I don’t execute from C: This is when I use win app which has no alternative in a Linux world and why I waited for 4.1 for four years. When jevank fixes at-the-moment-a-must-attaching via -…