Preventing software installation in Admin account?

[KlausK]

I have only one admin account in my XP PC and want to prevent software
installation when my kids & their friends use the PC. Creating another
account won't help here because the games that they play run only in an
admin account.

What I want to do is to be able to enable "software installation prevention"
on the fly with a program. Is there something that can do this?

 

[Gordon]

I have only one admin account in my XP PC and want to prevent software
installation when my kids & their friends use the PC. Creating another
account won't help here because the games that they play run only in an
admin account.

What I want to do is to be able to enable "software installation
prevention" on the fly with a program. Is there something that can do
this?

I would suggest that if it's YOUR machine, then YOU dictate what goes on. If
their games only run as admin then either stop them doing it, or get them a
second machine...

 

[3c273]

Create a limited account and use "Run as" to launch their game as an admin.
Louis

 

[Bruce Chambers]

I have only one admin account in my XP PC and want to prevent software
installation when my kids & their friends use the PC.

Create limited accounts for the children to use.

Creating another
account won't help here because the games that they play run only in an
admin account.

Then either replace thiose games with WinXP-compatible versions, or
accept the fact that your computer willo be at the mercy of the children.

What I want to do is to be able to enable "software installation prevention"
on the fly with a program. Is there something that can do this?

Yes, don't allow anyone to have administrative privileges.


--

Bruce Chambers

Help us help you:


They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

 

[xxx_]

Do note that a password protected account can be easily broken into by using
the default administrator account in safe mode or by doing something in the
command prompt. (If your kids know how to do it)

 

[Kayman]

I have only one admin account in my XP PC and want to prevent software
installation when my kids & their friends use the PC. Creating another
account won't help here because the games that they play run only in an
admin account.

What I want to do is to be able to enable "software installation prevention"
on the fly with a program. Is there something that can do this?

For day-to-day work/browsing use the Limited User Account LUA) and refrain
from using the Administrator Account (AC).
Least privilege
http://www.securityfocus.com/infocus/1848
It is important that administrators follow the rule of least privilege.
This means that users should operate their computer with only the
minimum set of privileges that they need to do their job. Typically this
means operating as a normal user, and only when absolutely necessary use
the Run As or MakeMeAdmin commands to elevate privileges.

The Importance of the Limited User Account (LUA).
http://blog.washingtonpost.com/securityfix/2006/05/the_importance_of_the_limited.html

How the right user account can help your computer security.
http://www.microsoft.com/protect/computer/advanced/useraccount.mspx

Aaron Margosis' "Non-Admin" WebLog
http://blogs.msdn.com/aaron_margosis/pages/TOC.aspx

The easiest way to run as non-admin.
http://blogs.msdn.com/aaron_margosis/archive/2004/06/17/158806.aspx