|All users ought to be standard users (in xp limited users.) Only a single administrator account ought to be allowed. That admin account only needs to be used as "run as" and not used normally.|
If everyone is on as the lowest user then these types of commands can't be normally run.
"The era of big government is over," said Clinton 1996