On a *nix system I can use a chroot to isolate two processes from each other and from the rest of the system. Is there any similar security system under windows? Or is there any way to prevent two processes from reading/writing to each others files?
I'm not sure you will gain anything on Windows by chrooting - do you have a specfic need?
In case any the top result on google is http://www.winquota.com/wj/.
Perhaps application virtualization might be an option? Microsoft has the following to say about it:
In a physical environment, every application depends on its OS for a range of services, including memory allocation, device drivers, and much more. Incompatibilities between an application and its operating system can be addressed by either server virtualization or presentation virtualization; but for incompatibilities between two applications installed on the same instance of an OS, you need Application Virtualization.
Not exactly like chroot. It does setup a sandbox for each program you specify. It can easily keep processes isolated.
I wouldn't use anything like this, you are running under Windows mate.
NTFS has the most fine grained access rights you can find. Its not hard to let a prozess start with lower privileged user, and only giving that user access to the files of this single application.
No need to use something like chroot, which is not a security tool, when you can already define what user is allowed to do what in what directory.
Its no different than like giving the Apache under Linux its own user, only allowed to work inside his folders.
There is a chroot.exe included in Gow (Gnu On Windows)