▁without ▁device ▁drivers ▁and ▁it ▁does ▁not ▁have ▁a ▁client ▁that ▁is ▁pre installed , ▁applications ▁can ▁run ▁directly ▁from ▁USB ▁Flash ▁or ▁network ▁shares ▁without ▁previously ▁need ing ▁elev ated ▁security ▁privileges . ▁ ▁Sof tr icity ▁( ac quired ▁by ▁Microsoft ) ▁oper ates ▁on ▁a ▁similar ▁principle ▁using ▁device ▁drivers ▁to ▁intercept ▁file ▁request ▁in ▁ring 0 ▁at ▁a ▁level ▁closer ▁to ▁the ▁operating ▁system . ▁ ▁Sof tr icity ▁install s ▁a ▁client ▁in ▁Administr ator ▁mode ▁which ▁can ▁then ▁be ▁accessed ▁by ▁restricted ▁users ▁on ▁the ▁machine . ▁ ▁An ▁advantage ▁of ▁virtual izing ▁at ▁the ▁kernel ▁level ▁is ▁the ▁Windows ▁Lo ader ▁( respons ible ▁for ▁loading ▁EX E ▁and ▁DLL ▁files ) ▁does ▁not ▁need ▁to ▁be ▁re im plement ed ▁and ▁greater ▁application ▁compatibility ▁can ▁be ▁achieved ▁with ▁less ▁work ▁( S of tr icity ▁claims ▁to ▁support ▁most ▁major ▁applications ). ▁A ▁dis adv antage ▁for ▁ring 0 ▁implementation ▁is ▁it ▁requires ▁elev ated ▁security ▁privileges ▁to ▁be ▁installed ▁and ▁crashes ▁or ▁security ▁defect s ▁can ▁occur ▁system ▁wide ▁rather ▁than ▁being ▁isolated ▁to ▁a ▁specific ▁application . ▁Because ▁Application ▁Virtual ization ▁runs ▁all ▁application ▁code ▁n atively , ▁it ▁can ▁only ▁provide ▁security ▁guarante es ▁as ▁strong ▁as ▁the ▁host ▁OS ▁is ▁able ▁to ▁provide . ▁Un like ▁full ▁machine ▁virtual ization , ▁Application ▁virtual ization ▁solutions ▁currently ▁do ▁not ▁work ▁with ▁device ▁drivers ▁and ▁other ▁code ▁that ▁runs ▁at ▁ring 0 ▁such ▁as ▁virus ▁sc ann ers . ▁ ▁These ▁special ▁applications