Hi, Is it possible to lock down so student cant uninstallation some programs like the antivirus, but can install there on programs. We will deploy the Student PC from SCCM, and use it also for patching the Windows. there will be also Forefront on the machine. Any Idea how to lock down part of the Computer? /SaiTech

Hi, Since the students have enough permission to install programs, they will also have permission to uninstall program. To avoid uninstalling certain application by student, you should put the machines in domain and make a logon scripts which make the student to install the application except the user already has it on the machine. To make a logon script to install software, please refer to the following article: http://support.microsoft.com/kb/816102 Thanks, Novak

Is there no way to setup Forefront in such a way that a Password is required before uninstallation? Symantec AV and SEP had a similar option You could repackage the application so that it is hidden from Add/Remove Programs, meaning it could be uninstalled from the Registry Uninstall string.