Re: Can I use Group Policy to deny software installation?
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/02/05
- Next message: tharcleroad_at_taconichills.k12.ny.us: "Group policy to disable network hyperlinks in Word"
- Previous message: Steven L Umbach: "Re: Can I use Group Policy to deny software installation?"
- In reply to: B. Meincke: "Can I use Group Policy to deny software installation?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 2 Jun 2005 15:16:42 -0500
Beyond my previous suggestions you can also use Group Policy to
modify/enforce Web Content Zone restrictions such as for the internet zone
to prevent users from downloading files via Internet Explorer. You could
also add sites to the trusted Web Content Zones if you want exceptions to
the rule. I have also played around with giving a user account deny for
execute permission for "files only" via special permissions to their user
profile folder and the all users shared documents folder and subfolders. By
default those are the only folders a regular user can write to and would
probably be where they are trying to copy files to run or install an
application. For me this has worked but is something that needs to be fully
tested before implementing to make sure that everything that works for a
user that should. If users are able to write to folders other than that I
would take a serious look as to why that is. --- Steve
"B. Meincke" <garyallan@highschool.ca> wrote in message
news:2501FC78-C838-44BC-ACC4-CB9B3CADDB5A@microsoft.com...
>I have done some research and found (and implimented...thank you again,
> Steven) ways to deny student users under our domain to launch certain
> installed software, but is there some way (a domain-level group policy,
> perhaps) that I can keep them downloading/installing certain programs in
> the
> first place?
>
> Also, how might this impact their ability to use key drives under Windows
> 2000/2K?
>
> Thank you in advance for any insight in this matter.
> --
> BJM
> ACE Assistant
> Gary Allan High School
- Next message: tharcleroad_at_taconichills.k12.ny.us: "Group policy to disable network hyperlinks in Word"
- Previous message: Steven L Umbach: "Re: Can I use Group Policy to deny software installation?"
- In reply to: B. Meincke: "Can I use Group Policy to deny software installation?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
