Re: restricting software installation

From: Nathan (caseynathan_at_hotmail.com)
Date: 07/27/05 

Date: Wed, 27 Jul 2005 11:15:38 -0700

Make sure users are not local admins on their machines.
<param@community.nospam> wrote in message
news:O4Rd7HskFHA.1996@TK2MSFTNGP10.phx.gbl...
> Hi all,
>
> We run a single Server 2003 domain running on SBS2003. What I want to do
> is restrict users from installing programs on their machine. If they want
> to install a program they would have to call an Admin to do it. Ideally,
> it would be nice if I can have an approved list of programs that they can
> install, and anything not in the list they would have to contact an admin.
> Any suggestions/best practices on this? I have tried messing with the
> Software Restriction Policies in the gpedit tool, but that ended up giving
> all kinds of errors on the machines including error messages when Outlook
> was opened. Probably because of Adobe Professional plugins that get
> installed into Outlook & Office products.
>
> thanks!
>

Relevant Pages

  • Re: Users dont have permission to install software?
    ... > they do get the admin rights to their machines. ... We need another 'mode', such as 'install only mode', where a user can login ... Les Connor [SBS Community Member - SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: remote clients behind firewall
    ... The clients are part of the domain and the Client Installer acct has local ... admin rights on the machines as a result of membership in Domain Admins group. ... I have been able to successfully install (according to ccm.log, ...
    (microsoft.public.sms.admin)
  • Re: Local Admin on workstation
    ... I wouldn't make them admin for 15 installs... ... You could use psexec but you first need to make a silent install ... convertors pack from MS for office 03 machines. ... You may also just use psexec to make a silent install remotely.. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricting software installation
    ... > Make sure users are not local admins on their machines. ... >> is restrict users from installing programs on their machine. ... >> to install a program they would have to call an Admin to do it. ...
    (microsoft.public.windows.server.security)
  • Re: Attempting install of advanced clients with no Admin$
    ... > workstations that do not have the Admin$ enabled. ... > to the machines. ... a CCR is submitted to the site and a Client Push ... > install is initiated. ...
    (microsoft.public.sms.setup)