Trouble is with the amount of 'crap education software' that need access to Program Files, even System32 and Windows in some cases, it's very hard to lock things down and still keep it functional.