The Windows 7 operating system provides flexible settings for the rights of each user. The administrator sets the list of actions that are allowed to the user in the system, and only the administrator can change this list. Installing programs is an action affecting the security of the system.
Necessary
administrator rights
Instructions
Step 1
Log into the operating system as the "Administrator" user. To do this, you need to know the password for the system administrator account, and enter it when Windows starts. As a rule, these data were set by the user when the computer was first started, for example, when installing the operating system. If you do not have administrator rights, disable this account or try to recover your password.
Step 2
Start "Local Group Policy Editor". To do this, enter the gpedit.msc command in the Run line and confirm its execution by pressing enter on the keyboard. This will give a command to the operating system using the command line. On the left side of the window, expand User Configuration - Administrative Templates - System and navigate to Run only specified Windows applications. Double click on this label to start the service.
Step 3
The settings window for this service will open. Set the switch to the inscription "Enable", and then click on the button "Show". The "Output Contents" window opens. Here you need to specify which programs the user can run. Thus, if you specify a strict list of exe-files that the user has the right to run for execution, running setup.exe or any other installation will be beyond its capabilities.
Step 4
It is also worth turning off the ability to make changes to the registry, launch applications from the command line, and also launch from Help. These services are interrelated; however, shutting down one does not shutdown the other. You will be able to set different rights for the software. If you have a large number of programs on your computer, review and delete unnecessary ones so as not to take up memory.
