Re: restrict desktop
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/29/04
- Next message: Steven L Umbach: "Re: Legacy apps on Windows Server 2003"
- Previous message: Steven L Umbach: "Re: Local admin restricted from IISRESET"
- In reply to: Sam Ramsey: "restrict desktop"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 29 Feb 2004 01:19:50 GMT
Make sure they are only regular users, give users/everyone no more than
read/list/execute permissions to the root/drive folder if possible, configure the
internet Web Content Zone to disable downloads via Internet Explorer if they should
not be doing any, and populate the disallowed Windows Application list in Group
Policy with at least setup.exe and install.exe [and any other popular unathorized
programs] which while not foolproof is easy to do and should help. See the link below
for how to do that. For more extreme control you will need to upgrade to XP Pro and
use Software Restriction Policies. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
"Sam Ramsey" <anonymous@discussions.microsoft.com> wrote in message
news:358001c3fd87$9cebd7a0$a001280a@phx.gbl...
> What is the best way to restrict user on there desktops
> from downloading and installing software?
- Next message: Steven L Umbach: "Re: Legacy apps on Windows Server 2003"
- Previous message: Steven L Umbach: "Re: Local admin restricted from IISRESET"
- In reply to: Sam Ramsey: "restrict desktop"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]