Hello there.

I would like to forbid a user (LUA account) from disabling my KASPERSKY app (firewall+av) or anything else system IMPORTANT. Should be simple to do even without gpedit.msc or AD, right?

I thought of this:
For every app you don't want this user to be able to stop/modify, change its folder permissions to DENY modify/etc. Maybe also in the registry set some deny's.. and some deny's in the tabs for the services..

How could I best do this?
I'm on XP Pro SP3.Can't you just go to the properties of the Kaspersky file and go to the SECURITY tab to set your permissions?
I thought an LUA account couldn't make CHANGES like that anyway.I don't see any permissions there. I just set a password. That does it too.
I was just interested on how to generally block a LUA from doing any INSTALL changes.
A LUA can do that.What version of Windows are you running?

Windows XP Pro 32 bit 5.1.2600 SP3.Start Here...patio, no offense but you severely underestimate my tech skills.
I'm already savvy in permissions.. =P

What about permissions for services?
Anyway I'll work on it.I'm not offended at all....

And no offence either but someone with savvy skills would be done by now...