Re: XP Specific Program Access for Limited User Accounts

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/03/03


Date: Tue, 2 Dec 2003 22:39:20 -0700

I believe that I have omitted part of your inquery.
A limited account cannot install software that has an
installer that writes to the registry and installs for all
accounts. It can however install software that does
not use much except file copy. This last type of install
really cannot be prevented if the account has write access
anywhere (which it will if it is a useful account).
You can use group policy to advertise or assign applications
to specific account, and also to control what specific account
can execute. This last use of software restriction policy is
really the only way to prevent a limited user from, not installing,
but from having any use of what they installed (making their
installing useless in those cases where write access does allow
for simple installs.)

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Vaughn" <anonymous@discussions.microsoft.com> wrote in message
news:008f01c3b957$c354be30$a001280a@phx.gbl...
> Our small business has XP Pro, and I want to allow our
> receptionist (for whom I've created a limited account) to
> run Quickbooks, IE, Office and other current programs,
> but I don't want her to be able to install new software.
> How do i allow a limited user account in XP access to a
> specific programs?


Relevant Pages

  • Re: Internet explorer crashes explorer.exe in limited accounts only
    ... In the limited account, after this happens, you might also try checking the ... >>administrator and not limited. ... Install the applications ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Advanced Client install nightmare
    ... I can successfully install manually using the SMS account. ... MS Client Configuration Manager cannot install the Advanced Client to ...
    (microsoft.public.sms.admin)
  • Re: userName="machine" didnt work
    ... Juan, ... version) than the .42 dlls. ... Deleted the ASPNET account from "Local Users and Group – ... ASPNET user and allowed the ASP.NET install to re-create it. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Alerting - Malicious software removal tool
    ... >needed to install an application that she could not install from ... >"Administrator" account. ... You failed to analyze the root cause and correct it ... use their computers to have fun. ...
    (microsoft.public.security.virus)
  • Re: Alerting - Malicious software removal tool
    ... much of what the MSRT ... yet), used MS Works, had a single account, administrator level logon ... needed to install an application that she could not install from ... only reacting AFTER the compromise. ...
    (microsoft.public.security.virus)