Hi. I am in charge of 2 pc at work. Unfortunately, one of those is used by one person, with his password, and a lot of others, who know the password, i don't know how.

So they install a lot of junk, games, useless softwares. That old machine become slow as hell, slugish, and i'm good to pass 2 hours to clean up that thing.

I want to know how i can configure an account with access to all the documents and softwares in the pc, protected by a password, but no permission to install new software.
An account with no access to nothing, no software install, just access to internet.
And an administrator account, mine, protected by a password, were i can install programmes, and do all the stuff i need to do.
Can you tell me how can i do that?
Thank you
JMoujiik