Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A "guest" was able to install Google Chrome on the guest account in Windows XP.

How can I prohibit installation of any software in Windows XP and Windows 7?

share|improve this question
Long live chrome! You should probably let them use it, as it's likely to be a lot safer than whatever browser you are currently letting them use. – codesparkle Nov 3 '12 at 19:10
Chrome does this deliberately (see Why does Chrome install itself under user directory instead of Program files?) – Karan Nov 3 '12 at 22:49
up vote 2 down vote accepted

A guest does not have rights to install system-wide software, but he can write to his or her profile.

Combine that with programs which can run from a single binary or which are specifically designed as 'portable' applications with no need to access the registry or anything else outside their start directory and a guest can run each such program as desired.

The only way to stop that is to blacklist all programs except those on a whitelist. Windows has policies for that. To enable those use gpedit.msc and add new software restriction policies.

enter image description here

share|improve this answer
gpedit is only on Pro or higher versions of windows. – Moab Nov 3 '12 at 19:39
@Moab - The author gave no indication this would be a problem. – Ramhound Nov 3 '12 at 19:54
They gave no indication either way. – Moab Nov 4 '12 at 1:13
If they can not find it the OP can always adjust the OP. For what it is worth it, if I had realised it needed the pro version at posting time I would have added it at that time. – Hennes Nov 4 '12 at 1:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .