A shared front-desk Windows computer should allow routine work but require approval for software installation. Which account arrangement is best?

1. Disable account passwords entirely
2. Standard user accounts with separately controlled administrator access
3. Make every user a local administrator
4. Share one unrestricted administrator password publicly