Disallowing a user to install a program

Go to run type: mmc then add\remove snap in for Local users and Groups. You can then select the user and give then specific rights.

Also you can go to Windows Explorer select Tools then folder options and remove the check from simple file sharing this will allow you to give or deny permissions. Then all you have to do is select the program(s) or file(s) select security then permissions add the specific user then give or deny permissions.

I don't think you understood my problem. I am an administrator on my computer and I also created a power user. I have a program installed on my account and I don't won't that program to be used by the power user. This I can do by removing from the Security tab, read permissions. But that Power User can install another copy of that program and use it. I'm asking: is there some sort of software policy (may be a policy that disallows a user to write in some part of the registry) that I can use, such that the Power User will never be able to install a program ?

In the same place they should have something that states Group policy if they dont you are going to have to do it on the servers end (Windows 2000\2003 server) if you are doing it on a specific machine you have to do either do a local computer policy or deny the specific user the right.

In the same place they should have something that states Group policy if they dont you are going to have to do it on the servers end (Windows 2000\2003 server) if you are doing it on a specific machine you have to do either do a local computer policy or deny the specific user the right.