I am trying to figure out if having a user in the "Users" group will be enough to prevent her from install unwanted software.

The things that I don't want the user to be able to install are:

• virus
• malware
• bandoo stuff
• Internet Explorer Addons

To put you in context, I am thinking of my grandma's computer, I want her to be able to read all her email stuff and attachments, but without the hassle of needing to reinstall the whole computer every few months.

The computer will run Windows XP, with some free antivirus. It will not be part of any domain. It is just a home computer.

Linux, I have tried making her use it, but she was already accustomed to Windows and was not really an option to have her re-learn where was the shutdown button.

So, are these considerations enough to prevent her installing unwanted software? What other options come to you mind?

Thanks