Keeping Standard Account Users out of the Administrators Account

[myids]

I am about to start using Windows 7 Home Premium.

As I understand it, a Standard user can install software if that user can provide a valid Administrator User name and password during the install process, when prompted by Windows 7.

My question is, if you providide a Standard user with Administrator credentials, how can you keep that Standard user from logging into Windows 7 with the Administrator account and messing the system up?

Is there another way to allow Standard users to install software and not know the Administrator user name and password.

Sorry if my question seems stupid, but I have done many searches and not been able to find an answer so far.

 

[logicearth]

Don't give them Administrator credentials....

 

[myids]

Don't give them Administrator credentials....

If I don't give them Admin credentials, can they still install software?

 

[Bill2]

Instead of allowing standard users to install software, what you can do is to logon as Admin, then install that particular software for ALL USERS. Then make sure that the software shortcuts are present in the User folders of all the standard users, if they are not add them manually.

That way all the standard users will be able to use the software you allow them to, and you will also be able tokeep out malicious/illegal stuff.

 

[myids]

Thanks for the response. I do resent having to do everyone's work for them (installing software, etc.) Windows should call it the administrator-babysitter account. I miss XP already...

 

[Bare Foot Kid]

Hello myids, welcome to Seven Forums!



Here is another option for programs/apps that require user credentials, you will still have to set this up for them but they can use the shortcut you place on their desktop and they won't get a UAC prompt at all when they want to run it.
Have a look at the tutorial at the link below; be sure to keep us informed.


Elevated Program Shortcut without UAC Prompt - Create

 

[Kirsch]

You could try to just drop UAC a notch or two

 

[Thorsen]

I think you could make a second Admin account to give the name/pass to everyone and limit that admin to only the roles that you want. I dont know if you need Win7 Pro to do this or not though.

 

[Bare Foot Kid]

You could try to just drop UAC a notch or two

And compromise the system security.

 

[Thorsen]

You could try to just drop UAC a notch or two

And compromise the system security.

I agree. I would rather give people I trust the admin pass than give all programs online the ability to access my PC.

This is why UAC is there. It is to prevent people from installing bad programs and from programs running themselves automatically.

If this is a business, then I would do the work myself as admin, or get someone specific to do the task of all installs.

If this is a home environment, and you trust that no one is going to be installing anything-and-everything-off-the-internet then its more of a pain to have to sign in for everyone each time someone wants to install a game or run a specific program like CCleaner (for example).

 

[Thorsen]

http://www.sevenforums.com/tutorials/3652-local-group-policy-editor-open.html

^^^^ Info on GPEdit

 

[logicearth]

Thanks for the response. I do resent having to do everyone's work for them (installing software, etc.) Windows should call it the administrator-babysitter account. I miss XP already...

So on Windowx XP you gave everyone Administrator access? Because unless you gave them administrator access you would have to be installing software yourself.