Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A "guest" was able to install Google Chrome on the guest account in Windows XP.

How can I prohibit installation of any software in Windows XP and Windows 7?

share|improve this question
    
Long live chrome! You should probably let them use it, as it's likely to be a lot safer than whatever browser you are currently letting them use. –  codesparkle Nov 3 '12 at 19:10
    
Chrome does this deliberately (see Why does Chrome install itself under user directory instead of Program files?) –  Karan Nov 3 '12 at 22:49
add comment

1 Answer

up vote 2 down vote accepted

A guest does not have rights to install system-wide software, but he can write to his or her profile.

Combine that with programs which can run from a single binary or which are specifically designed as 'portable' applications with no need to access the registry or anything else outside their start directory and a guest can run each such program as desired.

The only way to stop that is to blacklist all programs except those on a whitelist. Windows has policies for that. To enable those use gpedit.msc and add new software restriction policies.

enter image description here

share|improve this answer
    
gpedit is only on Pro or higher versions of windows. –  Moab Nov 3 '12 at 19:39
    
@Moab - The author gave no indication this would be a problem. –  Ramhound Nov 3 '12 at 19:54
    
They gave no indication either way. –  Moab Nov 4 '12 at 1:13
    
If they can not find it the OP can always adjust the OP. For what it is worth it, if I had realised it needed the pro version at posting time I would have added it at that time. –  Hennes Nov 4 '12 at 1:21
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.