Nathan,
Unsure how you were able to amend items from within Administrator without logging in, but yes register specific details can be changed from the configuration screen before entering any passwords. There is a registry tweak to restrict applications being run on the till without locking the entire user down in windows.
Before going any further please note this will only work for Win2k, ME and XP. Also the restriction is for the current user that is logged in when you make the changes, if your are using multiple logins for windows you will need to ensure this is carried out for each user. As usual, ensure you backup your registry before making any changes.
- Run regedit (Start > Run > Regedit)
- Find the key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]
- In here add a new DWORD called "DisallowRun" and set the value to "1".
- Create a new sub-key under the Explorer key called "DisallowRun"
- Within the sub-key create a new String Value named "1" and set the value to "SOADMIN.EXE".
Close regedit and reboot the pc, the application should now be restricted for that user.
This can also be usefull if you only wanted to allow SO Manager to be run on the back-office PC. In this case you would name the second String Value "2" with the value "SOMANAGER.EXE" for each user/pc.
If you want to remove the restrictions either remove the String Values from the DisallowRun key, or set the DisallowRun DWORD value to "0"
Hope this helps!