Sorry for the large file size. I automatically generated these rules for my AppData folder. I want to deny execution except for what's already there. I can't run anything from the %HOT%, which is actually J:\ (it replaced it on its own with %HOT%) ie: My RAMDisk. But I can still run chromium from the AppData folder.