To prevent application access outside it's installation directory

[Liene]

Hello!
I need a little advise.
If I have some windows aplication that runs some periferial hardware scan - to check out folder content.
Can I prevent access and let application sit inside it's installation directory ?
Or I just have to prevent access to every important folder specifically ?
I mean - do I have to set all important folders access only to authorised users and admins ?
And what kind of user are any windows application - just simple user ?
Excuse me about some complicated queries?
Thanks!

 

[gregrocker]

If you have programs you don't want other users running then only install them to your user account. Most will offer you the choice.