RE: Preventing Users from Installing Programs

From: IBTerry [MSFT] (ibterry_at_online.microsoft.com)
Date: 11/19/03


Date: Wed, 19 Nov 2003 16:14:50 GMT

If the users are an administrator of the machine then they will always be
able to install software.
I would recommend using Regmon and Filemon from SYSINTERNALS.COM to
determine what specific permissions a non-admin user needs to run the
particular applications you referenced.
Regmon and Filemon will show you where the application are reading/writing
from the registry/file system...once you know this information you can open
up the permissions on those reg keys/files to allow non-admin users access
to these locations.

http://www.sysinternals.com/ntw2k/utilities.shtml

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: Access is denied to this object
    ... I did not any issues with FileMon, but RegMon did find these two calls: ... The call to Server.CreateObject failed while checking permissions. ... When my ASP file executes this line: ...
    (microsoft.public.scripting.vbscript)
  • Re: Prevent local administrators installing software
    ... Yes Regmon and FileMon is exactly what I had in mind. ... registry permissions and not file permissions. ... there is no such thing as a "limited administrator account". ...
    (microsoft.public.win2000.networking)
  • Re: Client gets blank desktop on login to TS Session
    ... > As with all permission-related problems, I would download FileMon and ... > RegMon from http://www.sysinternals.com/. ... I haven't changed the file system permissions at all. ...
    (microsoft.public.windows.terminal_services)
  • Re: Apllication Permissions
    ... > download filemon and regmon from Sysinternals at the link below. ... > the process until no more access denied permissions are found. ... > process even though user apparently has ntfs permissions. ...
    (microsoft.public.win2000.active_directory)
  • Re: FTP problem with more than 2 users configured
    ... After this I ran Filemon and set it to filter on "inetinfo". ... I think you'll agree that file permissions are not the issue here. ... >> began after the installation of Exchange Server 2003. ... >> computer from the network' for other users with the Group Policy ...
    (microsoft.public.inetserver.iis.ftp)