Re: Prevent users from installing apps
From: Jamie (Jlawson01@OMITTHIS.lear.com)
Date: 03/11/03
- Next message: ERIC ROBERTS: "WINDOWS XP"
- Previous message: Mbee: "Local Policies on MANY XP Pro's with out Active Directory."
- In reply to: Ryan: "Prevent users from installing apps"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Jamie" <Jlawson01@OMITTHIS.lear.com> Date: Tue, 11 Mar 2003 16:22:55 -0500
First and really the only good solution is to find out how to make the apps
work for the user group! Look at changing the File system rights and the
registry permissions for the applications.
Second not recommended!
Limit NTFS rights to the file system on the machine for ADMINs.
Be careful on do this.
I would create 2 groups one full access and the other read only. Also in
doing this you will probably keep the applications from working that need
admin writes. In affect you are basically making this group have the same
rights as a user group. Also the registry is the other place where rights
could be adjusted but if you do a good job on the file rights you should
have no need to adjust these rights.
Jamie
"Ryan" <rlara@tycothermal.com> wrote in message
news:06b301c2e7e8$dee0f970$a501280a@phx.gbl...
> Hello!
>
> I would like to know if anyone out there knows how to
> prevent users from installing applications on their
> systems without placing the users in the "Users" local
> group.
>
> Currently my users have local administrative rights to
> their machines (Their domain accounts have been added to
> the local "Administrators" group)
>
> What I would like to do is prevent users from installing
> any software on their computers from here on out. I know
> that by placing their accounts into the local
> group "Users" I can prevent them from installing
> software, unfortunately this is not an option. All of my
> users need administrative rights to their systems in
> order to successfully run certain applications that we
> use.
>
> I have looked online for answers only to come up short
> each time. I have found many tweaks, reg hacks, GPO's etc
> that limited users to a point but do not prevent ALL
> installations from happening.
>
> If you happen to know how to prevent users from
> installing software on their system without removing
> their local administrative rights then please let me
> know. I'm thinking that there must be a reg hack or
> program out there that can provide me the functionality
> I'm looking for.
>
>
> Thanks for your time!
>
> Ryan Lara
>
- Next message: ERIC ROBERTS: "WINDOWS XP"
- Previous message: Mbee: "Local Policies on MANY XP Pro's with out Active Directory."
- In reply to: Ryan: "Prevent users from installing apps"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
