Account type: Standard user

[johnn1]

hello,

I have created a standard user.

my requirements:

1. standard user can install programs, which is saved for future uses (i have seen pcs where the programs are deleted/uninstalled as soon as the user log out)

2. standard user CANNOT re-install windows by inserting a windows disc at boot up!!

Is this already present under default standard user or..do i have to add some settings?

thank you!

 

[logicearth]

1. standard user can install programs, which is saved for future uses (i have seen pcs where the programs are deleted/uninstalled as soon as the user log out)

Installing a program isn't actually a special thing, it is just copying files to a certain location and setting some things up. As long as an application is not depending on administrative power it can be ran or installed anywhere. So yes a standard user can install applications...if they support installing without admin power. Look at Google Chrome, it requires no administrative power to install or run.

2. standard user CANNOT re-install windows by inserting a windows disc at boot up!!

Impossible. Windows is not running when a computer boots up, thus no user accounts.

 

[johnn1]

"2. standard user CANNOT re-install windows by inserting a windows disc at boot up!!"

how can one do to block anyone else (other than me) from re-installing windows by inserting a windows disc at boot up ?

thanks

 

[johnn1]

"2. standard user CANNOT re-install windows by inserting a windows disc at boot up!!"

how can i(owner) set up so that no one can re-install windows by inserting a windows disc at boot up?

thanks!

 

[logicearth]

By not giving them physical access to the machine...

 

[johnn1]

so no other way?

any 3rd party programs?

 

[F5ing]

The next best secure method, behind what logicearth posted (deny physical access) is to secure the BIOS with a password and set it so that it can only boot from the internal hard drive that you designate. But if someone has physical access, there are usually ways around even that option, although it takes a bit more effort.

 

[gregrocker]

You can try passwording the BIOS if the option exists in BIOS setup, but don't lose track of that password or you have to ship it back because the BIOS cannot even be reflashed without it.

If you enable the Guest account in Windows and password your own Admin account, it should keep your computer free from another user changing much without your permission. The Guest account is preset for this purpose.