A standard user can install programs in Vista Ultimate unless an administrator removes that right. I don't want to go with the guest account because there are multiple users with different access levels. I am certain that I've seen the module fthat allow one to prevent users from installing programs but I'm have a "senior moment".