How can I deny execution from a RAMDisk?

I though I'd give it another try and I've got it formatted at NTFS and I want to make use of permissions. So... how can I deny execution?

Keep in mind that if I do it through the properties>security tab it also makes me turn off "modify" (whatever that is) and that prevented me from installing a chrome extension.

 

I would think you could do a Path rule in SRP where you could deny *.exe on that drive letter. Or something similar. Might take a little trial and error.

-Or, you could go into the "Advanced Permissions" and edit those, and check "Deny" for "Traverse folder / execute file" and see what that does. I have never actually had cause to try that setting so I don't know what it would break.

 

I'll give that a try.

 

I have J:\ as Disallowed but I can still run a Chromium.exe from there.

edit: Got it.