Disable user password creation & more

[blacksaibot]

I am having trouble with the following tasks:

Disable a user from creating AND changing their password

Disable a user from installing ANYTHING (I used the elevated option on the windows installer group policy editor, but I tested it out on the account and they were still able to install steam which was a *.msi file)

Disable a user from emptying their recycling bin AND using the permanent delete function which allows a deleted file to bypass the recycling bin (shift + del)

Thanks in advance for your help!

 

[Alejandro85]

Disable a user from creating AND changing their password

In computer management, go to local users and groups and in the users section, right click the user, properties, check "User cannot change his password"

Disable a user from installing ANYTHING (I used the elevated option on the windows installer group policy editor, but I tested it out on the account and they were still able to install steam which was a *.msi file)

To prevent regular installers, just don't make the user member of the administrators group, that denies him access to write to program files and most shared locations. All MSI files require administrators right to run, and "run as administrator" will ask for an admin password in this case (which the user should not know).

Disable a user from emptying their recycling bin AND using the permanent delete function which allows a deleted file to bypass the recycling bin (shift + del)

I doubt this can be done. For instance, any user is proprietary of all files under his profile in users folder (desktop, documents, all libraries, etc) and the proprietary of a file always has enough power to delete it. The recycle bin falls under this category too. He should not be able to delete programs and other shared files if he isn't an admin, but for his private files, I think he's always able to do so.