Software to permanently block program installation

[Clannad_92]

How is just unplugging the internet a good solution? That obviously isn't going to work for long, and it's kinda stupid... what exactly are they going to do with no internet?

i know that...but its the best, temporary way...

You need to set them up a separate Windows user account and restrict its privileges so that it can't install anything.

still learning how to configure that...

Comodo is pretty much garbage... I'd stop trying to work it into some kind of solution... hell, I'd uninstall the worthless thing to be honest.

well, that the one that ive used until last week...i still wondering how my lil brother can access internet with the blocking in the way...HMMM...

[Tiffanys]

If you wanna be a real douche, setup a trojan with a keylogger and monitor everything he does. And, y'know, change his passwords for all his favorite sites as a message.

I dunno how you're taking weeks to learn how to do it to be honest. All it takes is reading of a simple guide, which shouldn't take you more than an hour at most to be completely done with it.

Just stop trying to tiptoe around the issue and do what you need to do. You know what needs to be done, stop being lazy and just sit down and do it. It won't be remotely as hard as you imagine. You waste more time with a bunch of halfassed temporary fixes than you would if you'd have just done the right thing from the start.

[kitamesume]

wasn't the original goal was to block program installation? if this is still the case then

edit: on the other hand, i found this http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7
do step 1 & 4.

[Tiffanys]

That's what I'm saying.

[bunalz]

There's a family settings option in the Windows 8 User Settings that allows you to limit what apps can be used. Windows 7 might have something similar [...]

Windows 7's parental control is a mess... Really inconvenient and not that effective. In my case, I went to do all the trouble setting it up and ended up with just using the host file to block sites.

You need to set them up a separate Windows user account and restrict its privileges [...]

edit: on the other hand, i found this http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7
do step 1 & 4.

I've been using MMC on a few computers that I hacked in the library for four years already. I'd say they're too effective, so it should solve the problem at the very least. You just need to create the limited account (standard user) as what Tiffanys has insisted.

Here's how to set up the Group Policy Object in the MMC. After that you could then restrict the windows installer. I'd advise against tweaking the registry unless the first step alone didn't work.

[Tiffanys]

Exactly.

Standard users can use nearly everything that an administrator can, except they cannot install software, and they cannot remove or modify system settings.  Running your computer from a Standard user account greatly increases your system security.  If you find you need to change a system setting or install something you can do so from Standard Account with your Administrator password through an elevated administrator prompt which will usually appear automatically.

Just password your Admin account and leave the Standard account without a password.

[surdumil]

I'll second Tiffanys' advice.
By default, user accounts restrict read/write access, so it's pretty easy to set up to disallow your brother's random installation attempts.  It's annoying as hell, too, so you'll have some extra fun with your brother.

[Clannad_92]

Exactly.

Standard users can use nearly everything that an administrator can, except they cannot install software, and they cannot remove or modify system settings.  Running your computer from a Standard user account greatly increases your system security.  If you find you need to change a system setting or install something you can do so from Standard Account with your Administrator password through an elevated administrator prompt which will usually appear automatically.

Just password your Admin account and leave the Standard account without a password.

Ok...will try it...thanks~
Guess i dont need COMODO