Hi, does one know a method or a program to avoid that a an app has read access (write: obligate!, so no comment) to other directories or registry? yes, there are programs like Sandboxie they disallow changes to system (the easy way), or virtualization (which is tricky) or in a virtual machine (in normal/most cases the guest has no access to host OS) - but too complex/elaborate. I want to keep the app just in it's own directory, knowing not much about his environment arout it. Knows just his directory. Like an empty HDD with nothing on it. Or in Win 3.1 times - without a registry. Is it possible? How?