Agree, but they want to be admin. My trick for click happy people (relatives & friends): An admin account with a decent freebie AntiVirus and UAC set to auto elevate (while UAC still on) PLUS deny elevation of UNsigned programs. Move the Documents (User Folders) to a data partition and add a ACL deny "Traverse Folder/Execute" (for drive by protection). Don't forget to replace the Windows log-on screen with an identical copy carrying the text "Home Premium Special Secured Windows 7" in a well visible font size. This approach will safe you heaps of time Yes they can't install unsigned programs, but hey when you own a Apple you can only install official Apple signed programs, on your Android smartphone you can install from the AppMarket. So people get used to these restrictions.