My friend is using windows xp and is logged in as admin and has no other accounts.
He wants to disable access to external storage like pen drives, HDDs etc and disable installing new software/games. He doesn't want to create another account. This must be done in the Admin account itself.
How to go about this?
Advertisements. Register and be a member of the community to get rid of them.
IMHO, it is better that your friend creates a second non-admin account... If he wants, he can set up xp to automatically log in to the second account... It gives a slightly better protection by using non-admin accounts for regular usage...