Hi,

We are setting up laptops and currently the standard account users are able to download and install application. They are able to install the downloaded executable file from the web (firefox browser installer) without entering the administrator account's password (when prompt for password, they just click NO and installation will proceed). 

Are there any additional ways needed for us to do to disallow standard account users from downloading stuff from the web and disable them from installing any softwares?

Appreciate your assistance on this. Thanks.

Please check the below link which may address your query on changing the Access Permissions in Security Properties for Standard Users

http://www.eightforums.com/tutorials/2815-permissions-allow-deny-access-users-groups-windows-8-a.html

Thanks
________________________________________
Don't forget to mark helpful posts, and answers. It helps others to find relevant posts to the same question.

Hi,

You meant to disable Standard User install firefox adds-on, isn't it? Based on my test there is no such settings in Windows to disable the installation. However there is other workaround method to disable this feature. see:

http://www.itsupportguides.com/windows-7/firefox-10-how-to-disable-addon-plugin-installation/

Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. 

Yes, use group policy and setup Applocker publisher rules if firefox\mozilla specific