Re: Preventing software installation in Admin account?

Tech-Archive recommends: Speed Up your PC by fixing your registry



On Thu, 13 Dec 2007 17:39:09 -0500, KlausK wrote:

I have only one admin account in my XP PC and want to prevent software
installation when my kids & their friends use the PC. Creating another
account won't help here because the games that they play run only in an
admin account.

What I want to do is to be able to enable "software installation prevention"
on the fly with a program. Is there something that can do this?

For day-to-day work/browsing use the Limited User Account LUA) and refrain
from using the Administrator Account (AC).
Least privilege
http://www.securityfocus.com/infocus/1848
It is important that administrators follow the rule of least privilege.
This means that users should operate their computer with only the
minimum set of privileges that they need to do their job. Typically this
means operating as a normal user, and only when absolutely necessary use
the Run As or MakeMeAdmin commands to elevate privileges.

The Importance of the Limited User Account (LUA).
http://blog.washingtonpost.com/securityfix/2006/05/the_importance_of_the_limited.html

How the right user account can help your computer security.
http://www.microsoft.com/protect/computer/advanced/useraccount.mspx

Aaron Margosis' "Non-Admin" WebLog
http://blogs.msdn.com/aaron_margosis/pages/TOC.aspx

The easiest way to run as non-admin.
http://blogs.msdn.com/aaron_margosis/archive/2004/06/17/158806.aspx
--
Being ignorant is not so much a shame, as being unwilling to learn.
(Benjamin Franklin)
.



Relevant Pages

  • Re: KB842773
    ... Please check if your account has the required privileges and enable what is ... This privilege identifies its holder ... As a background,> installation was launched from Admin account on a network and there is no> policies are implemented to deny pems to install hotfixes, tried as local> machine admin, tried to download and then install. ... we> need a fix ASAP due to a lot of people getting the same:> I receive this error when trying to download updated Windows Update> utility: ...
    (microsoft.public.windowsupdate)
  • Re: AXPVMS VMS731_UPDATE V2.0 glitch?
    ... >LOG_IO privilege is required to run WRITEBOOT, and the installation does ... >You lack LOG_IO privilege. ... running from the system account. ...
    (comp.os.vms)
  • Re: sysdm.cpl - control panel - gpedit.msc disabled
    ... installation on a hand me down laptop. ... I've tried promoting the user account that occurs on the welcome ... Also set the Supervisor password in the BIOS so BIOS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: what is an ASP.NET machine .. .net framework etc. ?
    ... > Thanx for your input, I am tempted to make a restore point,, and delete the account. ... I wouldn't have> objected to having the .net framework installed on my machine, if it> hadn't been for something creating this extra user account,. ... Was it the .net framework that created> the account or the Norton Ghost 9.0 installation that created it? ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Passwords
    ... "Windows Vista for Dummies" manual. ... I started by creating a test user account. ... The reason I say this is that, when I turned the Guest ...
    (microsoft.public.windows.vista.general)