By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
I use Windows XP Pro at home. I do not want my 14-year-old nephew installing programs. I therefore made sure he is NOT in the administrator or Power user groups. I have come across some programs that I want him to use, but it will not work unless he is a Power user at least. How can I grant him access to this single program OR can I use Group Policy to stop certain groups of users from being able to install ANY applications?
Software Restriction Policies is the answer you seek… but it'll be a long road to get the full lockdown approach you seek. In a nutshell, you'll want to RESTRICT everything, then allow to run only those applications which you specify. That should do the trick.