Would appreciate advice on the following. Firstly, my PC is used only by my wife and me - just one admin account. Execution protection will stop any exe file being executed without my/our permission. That much is clear to me. However, my son in law and daughter have a PC with four profiles. Theirs (admin) and two limited accounts for their teenage boys. They have a bit of a problem in that one of them has a bad habit of downloading dodgy files from games sites and/or other sites recommended to him by friends. Were my daughter/son in law to purchase PG, would/could execution protection be enabled only in the admin account?... in other words would PG stop exe files being run from the limited accounts? To rephrase it, by using PG could they stop the limited accounts from running dodgy files that they had d/l'd (unless they were executed from the admin account, ie with their parents permission.) Hope my drift here is reasonably clear.