Are you afraid of some users who could screw your windows totaly?For example,you use libraly computer,school computer or you have personal computer in you caffe bar.You can completly safe your computer again spyware,viruses and other possible craps with one simple operation:forbid anything to run,just apps what you need and what you give users to use.You can do it manualy using local security setting implement in windows operating system but that should be doing carefuly and you need to know what are you doing.Easier way to doing is download and install program 1st security agent from site http://www.softheap.com.

After you installed,you simply go to your main username(you need to have only one username,disable all others,just one administrator account is enogh)plus you need to disable options for edit registry and anything else similar like control panel  what someone can screw.You found all this options under your username in program then in explorer section.

You can add programs which you want to run or in opposite way,allow all except programs which you dont want it.This solution could be problematic beacuse when you disable all program with exceptions you cant run M.M.C.(microsoft managment console programs)to run and they are very important because they define your hardware configurations like device manager or computer managment  where you define some other things.

Of course,this is very good if you want your computer work fine and protected.But when you need  change something in your device manager and you cannot restart your computer(which program require to do after doing some operations) there is one trick:Windows network wizard.Now you are asking,what is relationship between computer restart and network wizard? Well there is no connection,but after doing network wizard it same effect like you restart computer.The good thing in that network wizard dont change anything if you already have deployed network settings,you just need to leave same setting and put proper workgroup name(it will be restored to default if you dont changed)So after finishing you computer is like is restarted.I dont know if this trick works with other programs who require restart(that probaly depend how deep program goes into the operative system tree and change it)but it works fine with 1security agent options.You disable running of all programs except which you dont need,and when you need return option for returing option allow all without restart you just need this procedure.And yes,this procedure is requied for MSC files beacuse for some reason programs allow just few file type like exe and com to put into the section allowed programs.