How to prevent users from installing?

[Dark]

Hi, plz do not start the flame war between users and Administrator like in a previous thread. 🙂
I have a win2k DC and win2k pro clients, but it seems there isn't a Group policy that would prevent users from installing softwares. Any help?
Also what would u suggest when making memberships of users in the DC? I need 2 power users and the rest should be retricted to only use the appz on their machine.
Thx for any help

 

[outlamd]

I thought that the "Restricted User" setting under Users and passwords would prevent any installing or removing of software.

 

[err]

There is tons of way to do this. you just need to be creative with your folder permissions and user permissions.

one way is to restrict write permissions for your domain user (or whatever user group you want to restrict) on all folders except their own document folder (or make a download folder on desktop). Then, disable the execute permission on that folder. Your average user won't be able to install anything now.

I don't know about your network, but you will need to plan on who can execute what and where. Is this going to be PCs for computer lab or corporate desktop? If it is the latter, you will also need to think about removing your user from being the local administrator, otherwise your policy won't be effective.

There's a bunch of thing to think about. Plan well and you should be ok 🙂

eRr

 

[Dark]

It's for a small office. Since I create the users using the DC, I thought there might be a group policy that I wasn't aware of that would permit me to retrict them automaticaly.
Outlamd: U mean in the DC or the local workstation?

 

[Dark]

^