Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have created a new user as admin. Then I changed the new user's account into a limited account. It cannot install new software, however the account was able to install Mozilla Thunderbird and a few other programs.

Is there a way to prevent this?

share|improve this question
Are you sure they are not using PortableApps? –  iglvzx Mar 12 '12 at 23:45
With a proper group policy, you can disable almost everything besides pre-installed applications. –  Shiki Mar 13 '12 at 0:30

2 Answers 2

You can set almost every kind of permission using the Group Policy and Local Security Policy.

(Yes, you can set installation too.)

share|improve this answer

... but this will not protect against applications not needing any installation, such as Thunderbird or Seamonkey which can be "installed" just by extracting a ZIP file into some random location the limited user is allowed to write to. Yes, there are clever developers not at all needing the "registry" stuff other windows programs can't live without...

For more professional protection, I think you're thus reduced to more strict tools, like M$'s AppLocker or comparable.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.