Prevent XP Pro users from installing programs on 2000 Server network?

[n8in99]

Is there a way to prevent users from installing programs locally on XP Pro machines running on a 2000 Server network. I have tried editing the Group Policy in AD, but can't find anything that can prevent the Domain Users group from installing software, unless the software has that feature specifically written into it.

Any help is greatly appreciated.

 

[Tarfin]

Remove their LAN accounts from the local administrators group on each machine. Pretty much any software would require admin rights to install, so you would have a huge lockdown effect from that. Also work with management on a policy of installing software on company computers. You'll usually find people receptive toward not breaking company policy if there are clear consequences to it.