1. Yes 2. That's right for updater 3. Correct for internet-facing 4. @guest uses D:\ for portable apps to cut down on disk memory utilization - but also to keep them separate from System Space; it is OK for portable apps in currently assigned directory. Portable apps that are not used very often can be kept in non-system partition\drive and executed un-Guarded when needed. I just solve it by adding CCleaner (only portable app I use on flash drive) to Power Apps.