Re: Try to prevent installs

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/19/04


Date: Mon, 19 Jan 2004 22:57:17 GMT

That will be difficult. You may try to add install.exe and setup.exe to the list of
disallowed programs in Group Policy as explained in the KB link below that may stop
less knowledgeable users. A better solution would be to contact the software
publisher about what ntfs/registry permissions would need to be changed to allow
regular users to use the application. You could try to do that yourself using free
third party tools from Sysinternals - regmon and filemon. While logged on as a
regular user, use runas to invoke filemon or regmon just before you try to run the
application. Then view the logs to see where access was denied, document/make
permission modifications and try again. If you can not get it to work, you may want
to consider using the compatws.inf template on those workstations which will give
users the same ntfs/registry permissions as power users, but without the extra rights
that a power user has such as creating shares. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
http://www.sysinternals.com/
http://support.microsoft.com/default.aspx?scid=kb;en-us;269259

"WP" <anonymous@discussions.microsoft.com> wrote in message
news:07df01c3dea6$19e45e40$a501280a@phx.gbl...
> We have workstations that need a global group in the power
> users local group. 3/4 of the users are in this group to
> run 1 certain app. how can i lock down the machines to
> prevent these users from installing applications on the
> local workstation.
> TIA
> WP



Relevant Pages

  • Re: assigning users to the Power users group via Group Policy
    ... > set focus to the local machine, ... > Power Users group on workstations in the OU. ... >> Groups policy setting. ... >> Windows XP workstations are used to configure the policy. ...
    (microsoft.public.win2000.group_policy)
  • Re: WINNTSYSTEM32CONFIGSYSTEM.ced
    ... Microsoft MVP - Windows NT Server ... Could anything else be causing this problem? ... >> We have several Dell Precision 670 workstations that have gotten the ... >> We got these computers for our power users because they urgently needed ...
    (microsoft.public.win2000.general)
  • RE: WINNTSYSTEM32CONFIGSYSTEM.ced
    ... Could anything else be causing this problem? ... > We have several Dell Precision 670 workstations that have gotten the ... > Windows 2000 Professional SP4. ... > We got these computers for our power users because they urgently needed more ...
    (microsoft.public.win2000.general)
  • Re: WINNTSYSTEM32CONFIGSYSTEM.ced
    ... Microsoft MVP ... Could anything else be causing this problem? ... |>>> We got these computers for our power users because they urgently ... |>>> workstations. ...
    (microsoft.public.win2000.general)
  • Re: Legacy apps on Windows Server 2003
    ... See the following link on configuring security templates for W2003. ... power users without the extra rights such as creating shares. ... application to run as a regular user and need to know what ntfs/registry permissions ...
    (microsoft.public.win2000.security)

Quantcast