I want to set permissions so the standard users on my PC aren't able to install software. It is a workstation used for POS and the employees have a general employee account but i've had issues with them installing programs leading to viruses and the like so i'd like to somehow prevent that. I'm running windows 7. Thanks in advance for any help you can provide.

You should definitely look at using AppLocker, which you can use to control exactly what can be run on your Windows 7 machines. Using AppLocker you can prevent your standard users from installing and running exectable files which they are not supposed to. More information at http://technet.microsoft.com/en-us/library/dd548340(WS.10).aspx Basically you manage AppLocker using Group Policies so take a look at a domain or local group policy in Computer configuration - Windows settings - Security settings - Application control policies - AppLocker. Also note that it requires you to use Windows 7 Enterprise or Ultimate.Blogging about Windows for IT pros at www.theexperienceblog.com

Hi, By default, standard users have no permission to install programs. With User Account Control (UAC) enabled, standard users need to provide the administrator account password to install programs. With UAC disabled, standard users cannot install programs. If the administrator account does not set a password, please set a strong password. Regards, Arthur Li - MSFT

I must emphasize that with Windows Installer 5.0 which is a part of Windows 7 application vendors can easily make Windows Installer installation packages that install just fine in the user space when users are running as standard users, not requiring any UAC prompts at all. Also applications like Google Chrome is installed in the user space (c:\users\<username>\AppData\....) instead of Program files without requiring administrative priviliges on the system. The only way to prevent this is to use AppLocker :)Blogging about Windows for IT pros at www.theexperienceblog.com