Re: How to stop users installing softwares.



Alexyy <Alexyy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Hi
Thanks for that document, i have some doubt, In software Restriction
policies i have enable disallowed( set default).after enabling
disallowed iam not able to open any application under program files.I
would like to when

%HKEYMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
I thinkall application under program file should open.

can some one help me how to add all msoffice files and iis admin in
additional rules

Need help

Regards

Alex

Hi, Alex -

There is really no such thing as a limited administrator account. You need
to figure out some other way for them to get their work done so that they do
not need admin rights. Without doing that, everything else is pretty
meaningless.


"Meinolf Weber [MVP-DS]" wrote:

Hello Alexyy,

Check out this one:
http://support.microsoft.com/kb/324036

http://technet.microsoft.com/en-us/library/bb457006.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


For those group of users, they do some backend work, is there any
other way to restrict users installing softwares

"Meinolf Weber [MVP-DS]" wrote:

Hello Alexyy,

Do not make them local admin first. But even with this you can not
complete prevent them to install/use additional software. Some runs
from USB drives or without installing.

Why do they have IIS on there XP machines?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Hi All,

I am windows 2003 server and win xp client setup in my
organisation. I would like to know how to stop a group of users
should not ale to install any softwares.This group of users have
local administrator right, they have to restart the IIS services
when ever they required or if need to add any thing in IIS, so we
have given local admin rights to those group of users.

I would like to know how to stop this group of users. should not
install any software and same time there work should not be
disturbed with related to IIS

Regards

Alex



.



Relevant Pages

  • Re: How to stop users installing softwares.
    ... Thanks for that document, i have some doubt, In software Restriction ... policies i have enable disallowed.after enabling disallowed iam ... from USB drives or without installing. ... Why do they have IIS on there XP machines? ...
    (microsoft.public.windows.group_policy)
  • Re: Installing IIS
    ... Did I not explain the difference between installing software and configuring ... terms are more than a fine distinction when it comes to IIS? ... Changing site configuration options is what is meant by configuring IIS ... wizard)and got a "please insert XP Pro CD-ROM". ...
    (microsoft.public.sqlserver.setup)
  • Re: Installing IIS
    ... You state "but new computers DO COME WITH IT on a separate restore ... This is a simple matter to do with IIS. ... much different from simply installing the software. ... restore drive or in a designated folder on the main drive OR FOR A SMALL ...
    (microsoft.public.sqlserver.setup)
  • Re: Installing IIS
    ... Since you have zero experience with IIS, ... This is a simple matter to do with IIS. ... much different from simply installing the software. ... but new computers DO COME WITH IT on a separate restore ...
    (microsoft.public.sqlserver.setup)
  • Re: Windows 2003 remote admin access
    ... Unfortunately the only reason this guy has admin rights is a political one. ... for the IIS webs to see if this is indeed what's happening? ... be done over the ports that are allowed. ... server, and/or, of the IIS install as one example, or simple ...
    (microsoft.public.security)