Re: Setting rigth user using group policies

The best thing you could do is to minimize rights in the system (stop using
power users, local admins etc.)

But for preventing users to run programs and you need to have your users as
power users/local admins is that you use SRP instead for preventing users to
run unautharized programs.

--
G Johansson
fantomen@xxxxxxxxxxxxxxx

"Edward" <Edward@xxxxxxxxxxxxxxxxxxxxxxxxx> skrev i meddelandet
news:0F02BF59-9429-4C9A-B702-308C38FBAB14@xxxxxxxxxxxxxxxx
Hi, I need help about how I can manage the user rigths (power user /
standar
user) using the group policies. We have to our users in organizational
unit,
and we not want that they can install software that they download from
internet or from another devices. I try to find the group policy to do
that, but I can't find it. The idea is set the users to standar rigth, so
they can't install unauthorized software.

thank you
Edward


.

Relevant Pages

  • Re: local admin issues
    ... The built-in local groups (e.g. Administrators, Power Users) are present and have the same SID on all Windows computers. ... Is there a way to prevent domain admins to be removed from the local admins ... browse to the ldomain's Local Admin Users Group and add it to the local XP machine's groups and choose Administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: In reality, are your users "non administrators" on their desktops ?
    ... > Currently my users are happy as 'administrators' on the local machines, but> since we've deployed SMS and patches and service packs can now be installed> under SMS account I am> considering downgrade the users rights on laptops from "administrator" to> "power users". ... All users on my network are only users - Not local admins or power users. ... Admiitedly my network is a lot smaller than yours at only 500 users, but IMHO the larger the organisation the tighter controls you need over what the users can do. ...
    (microsoft.public.win2000.active_directory)
  • Re: Group Policy and Local Administrator
    ... > users on their local machines. ... > maintain these users as local admins on their machines only, ... > making them power users on other computers on the network. ...
    (microsoft.public.win2000.active_directory)
  • User permissions
    ... I have a couple of users that have been set as local admins via a group ... the problem is that these users can not install items ... such as Flash plugging for IE etc, I thinki this is because power users can ...
    (microsoft.public.windows.group_policy)
Loading