Re: AdminPak installed by Domain User - can view all tabs and groups.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


"Paul Williams [MVP]" <ptw2001@xxxxxxxxxxx> wrote in message
news:uewMyJaUHHA.4784@xxxxxxxxxxxxxxxxxxxxxxx
A regular domain user shouldn't be able to install anything. If they did,
they probably have local administrative permissions and rights.

That is a very common misconception. In general, regular users can
easily install SOME software, especially software that is well written
and well designed.

The only things that regular users cannot install are services, drivers,
and programs that need some special privileges such as writing to the
System32 directory or SOME registry keys/entries.

It takes quite a bit of care to prevent users from installing "any
software".


--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


.

Relevant Pages

  • Re: Why can USERS install programs?
    ... files folder which does not let regular users write access in a default installation. ... available free tools to reset the built in administrators account password to null. ... yourself to see if you can install the mentioned programs to the program files folder ...
    (microsoft.public.win2000.group_policy)
  • Re: Path in 11.1
    ... Miscellaneous Settings and find "Current Directory in root's Path" and ... "Current Directory in Path of Regular Users" and UNcheck the box ... Workstation, Networked Workstation, Network Server or Custom Settings) ... You mean, during install? ...
    (alt.os.linux.suse)
  • Re: Limited Users can install programs!
    ... A regular user can still install some software [that does not write to the ... system folder, etc] and unfortunately some programs are being designed for such. ... XP Pro has the capability to prevent regular users from ... > One of my XP Home's limited users installed Kazaa. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: AdminPak installed by Domain User - can view all tabs and groups.
    ... regular users cannot install it. ... was because they don't have rights to register DLLs, ...
    (microsoft.public.windows.server.active_directory)
  • Installing Office 2007 easily on five new office computers
    ... I have a Site Licence CD for 2007 Pro and want to easily install on new ... These steps are successful for everything except for Office. ... Take hard disk from #1 and make it a slave on another computer and copy ...
    (microsoft.public.office.setup)