RE: How do I prevent Users from installing applications?
- From: Malke <notreally@xxxxxxxxxxxxxxx>
- Date: Wed, 13 Dec 2006 15:25:27 -0800
Santeria wrote:
Definitely do not allow them admin access, but restricted or standard
will be the choice: Restricted will stop any install, Standard will
allow some install, depends on what they are doing. Some users will
possibly needs a
little install access, some none at all. Also, Guest account can be
given fairly variable definitions.
"MJD" wrote:
Computers are in a Workgroup, some are Home and some are Pro, will
making each account a Guest or Limited account prevent them from
installing applications?
I'm sorry, but the information about Guest is incorrect. The OP does
*not* want to use the Guest account. The Guest account visible in
Control Panel>User Accounts is for when someone with no account on the
system wants to log in and do some work. It runs with elevated
privileges and that is why it is normally disabled.
To the OP: because you have a mix of Home and Pro, your security efforts
will be hampered because Home does not permit natively setting
fine-grained permissions and restrictions like Pro does. Ideally, you
would upgrade your Home machines to Pro and then use Group Policy to
set restrictions.
However, there is a difference between Ideal World and Real World. ;-)
On Pro, your users should only be in the regular User group. On Home,
you can try making them Limited and see if they can still do their
work. To set further restrictions in a consistent manner for all
workstations, look at the Microsoft Shared Computer Toolkit:
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.
- Prev by Date: Re: 0-length ntoskrnl.dll (NOT ntoskrnl.exe)
- Next by Date: Re: Windows Registry removal...
- Previous by thread: Windows Registry removal...
- Next by thread: Power Management settings via Registry
- Index(es):
Relevant Pages
|
