I recently installed Avira 10 free AV on Windows XP Pro SP3. Noticed today that it allows me full access to the configuration settings from a limited account. I'm able to make and save changes from the limited account. This seems to be a loophole to me (or is it?). I expect none but an admin to be able to make those changes.