Here is an article on adding software restriction policies, http://msdn.microsoft.com/security/securecode/columns/default.aspx?pull=/library/en-us/dncode/html/secure01182005.asp My question is, in the article they how to enable the basic user setting by adding a registry tweak. This does not work for me, and was wondering if anybody else has tried this technique.