Hi there, I need to add a user account for someone that I do not trust at all (don't ask). The standard Limited User Account, however, states only that the limited user "cannot always install programs" - not that they can not install any programs at all. Is there any way to restrict a user account so that the user can not install ANY software?? I really don't want keyloggers, etc. being installed without my knowledge. I also would like to prevent this user from using IE and force them to use FF instead - is that possible? Is there any way to get more specific about permissions than the simple choice between a limited and administrator account types?? Thanks.