Re: Remove install rights

From: Colin Nash [MVP] (x_at_x)
Date: 09/29/04 

Date: Tue, 28 Sep 2004 19:22:36 -0400

"Denzuku" <denzuku@yahoo.com.sg> wrote in message
news:2ea101c4a57e$86943a20$a501280a@phx.gbl...
> Hi,
>
> How can I remove the rights to install programs from the
> Power User group or Local Administrator group?

"Install programs" is not a specific right that you can simply give or take
a way. Instead, this ability comes from a combinations of permissions to
areas of the file system and registry. No matter what you do, an
administrator would always be able to get around it.

If you want to tighten things up for Power Users, have a look at the
permissions on the Program Files and Windows folders, and on registry keys.
However, why bother making them Power Users???

The real solution is not to make those people Administrators or Power Users.

Relevant Pages

  • Re: Stop users changing my password
    ... Locate the user accounts you wish to modify and open ... Type 'Power Users' in the 'Enter the object names to ... Power Users have the ability to install programs so this ... >>ability to be an administrator and this means being ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ADMINISTRATOR vs Administrator USer
    ... these be designated as administrator or how do I define one ... If a user is a member of the "administrators" group - no matter their other ... Power Users is supposed to be a group that can install certain things, ...
    (microsoft.public.windowsxp.general)
  • Re: ADMINISTRATOR vs Administrator USer
    ... Shenan Stanley" wrote: ... these be designated as administrator or how do I define one ... Power Users is supposed to be a group that can install certain things, ...
    (microsoft.public.windowsxp.general)
  • Re: Deny Permission for Internet Explorer
    ... If an administrator wanted stricter control of access to the computer's ... Users, Power Users, and Administrators. ... are used to assign permissions. ...
    (microsoft.public.win2000.security)
  • Re: Folder password
    ... domain administrator as well), would this be a wise thing to do? ... how your folder structure is set up. ... Anything you do, an admin can undo. ... The other power users sometimes need access as ...
    (microsoft.public.windows.server.sbs)