Hi, Yes, there is applocker on Windows7, but I like to run as Admin On our Vista PC's we run Safe-admin and make sure some threatgate programs (IE, Mail, etc) run as Basic User. This has the advantage that Vista does not request for elevation. In my Windows 7 ultimate I can't run a process as basic user (when running admin), like in Vista. The OS treats basic user as deny execute. Anyone who knows how to make this work? Thanks See for example the SRP setup on my wife's Vista Laptop (running Windows FW + UAC disable installer recognition + UAC only allow signed aps to elevated + UAC on quiet + 1806 trick + SRP as outlined below).