Re: Restrict Users from Installing programs

From: Herb Martin (news_at_LearnQuick.com)
Date: 03/27/04 

Date: Sat, 27 Mar 2004 11:08:42 -0600

Software restriction policies could be made to work for these.

If you only allows "approved directories" where you do NOT
allow the user to write, and approved APPs in the directories
where users might require write permissions, then you could
probably stop all "unapproved apps." 

-- 
Herb Martin
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:OoM1tgBFEHA.240@tk2msftngp13.phx.gbl...
> Hotbar!
> (I think).
>
> Herb Martin wrote:
> > Some apps don't need any specific permissions or rights,
> > nor to be formally installed to be effectively installed and
> > run.
> >
> >> The easiest way to accomplish this is to remove administrative
> >> privileges
> > from these users.  Remove them from the
> >> Administrators group and Power Users group and they will not have the
> > rights to install apps.  This may break some
> >> applications though so you'll need to test thoroughly.
> >>
> >> Thank you,
> >> Mike Johnston
> >> Microsoft Network Support
> >> --
> >>
> >> This posting is provided "AS IS" with no warranties, and confers no
> > rights. Use of included script samples are subject to the
> >> terms specified at
> >> http://www.microsoft.com/info/cpyright.htm
> >>
> >> Note:  For the benefit of the community-at-large, all responses to
> >> this
> > message are best directed to the newsgroup/thread from
> >> which they originated.
>
>

Relevant Pages

  • Apps Unable To Run w/o Admin Rights
    ... You can try to give your everyday account temp Admin ... rightd and then install the apps again, ... everyday account have rights to them. ...
    (microsoft.public.windowsxp.general)
  • Re: User rights in win 2003 d
    ... > account and the built security behind a windows domain. ... > are not allowed to install apps on clients. ... them rights to the registry are mutually exclusive actions. ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Restrict Users from Installing programs
    ... Some apps don't need any specific permissions or rights, ... > Administrators group and Power Users group and they will not have the ... rights to install apps. ...
    (microsoft.public.win2000.networking)
  • Re: Restrict Users from Installing programs
    ... >> Administrators group and Power Users group and they will not have the ... > rights to install apps. ...
    (microsoft.public.win2000.networking)
  • RE: Power Users change?
    ... the rights and permissions that are granted to the Power Users ... members of the Power Users group to modify computer-wide settings, ... install drivers, and to run non-certified programs. ...
    (microsoft.public.windows.server.migration)