I have xp machines and want to prevent them from downloading and install apps (malware) from the web. I need the users to be administrator accounts to run a specific app.