XP - How to keep a user from installing programs

[Tash]

Can anyone tell me how to do this?

 

[n0cmonkey]

Dont give the user write permission anywhere. 😛

What OS? You realize they will probably be able to install things in their home directory unless you make that unwritable, in which case tmp is usually writable....

 

[mOrphine]

i think the simplest way would be to let your user use the guest account if u dont wanna have to deal with security policies.

might be wrong though 😕

 

[AKA]

My wife is in only the users group and she cant install anything.

 

[Nothinman]

Don't give them admin or power user priveledges and make sure the rights to all the folders but their home directory don't allow writing.

 

[Psychoholic]

<< i think the simplest way would be to let your user use the guest account if u dont wanna have to deal with security policies. >>


From a security standpoint, enabling the guest account is the worst thing you can do.



<< Don't give them admin or power user priveledges and make sure the rights to all the folders but their home directory don't allow writing. >>


Exactly. If you have them set up in the correct group accounts and are using NTFS it's pretty self-explanatory. In addition if in the correct group they will not be able to write to any part of the Registry except HKCU.

This will not prevent them from running the install program initially but once running it won't be able to do anything.