Re: Set Group Policy to stop user installing any program



In news:eu78b11ZGHA.3496@xxxxxxxxxxxxxxxxxxxx,
Geoff <geoff@xxxxxxxxxxx> typed:
Guys

One of my clients is a college. Students like to install softwares on
the LAN PC.

Is there a group policy object to stop this behaviour?

Their OS is SBS 2003 std with 20 Win XP PC.
Students are sharing one user account. This means we may put as many
restrictions as we want without affecting other staff

Thank you very much

Geoff


Well, a couple of thoughts:

1. All users should have "user" rights only, and not be in the local
administrators or power users group (either by individual name or group
membership)
2. You can use software restriction policies to allow or deny application
usage
3. I don't recommend that you have all users sharing one account, generally
speaking. What's the justification for this? How are they expected to use
Exchange? How can you control whether someone deletes someone else's files?
4. You can use a mandatory user profile if you wish.

I guess 4 is no longer a couple, but a few. :)


.

Relevant Pages

  • Re: AD reading from text file to create user account
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... i want to set up an active directory for the computer lab, so that students can log into the computers using their ids and pwds. ... my second question is after i have created a user account is there a way i can prevent the users from loging into 2 or more computers simutanously. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Messaging each other even with messenger.exe disabled
    ... If the students are using the identical user account, it is the expected design behavior. ... The reason is a session should be able to send message, to other session that belongs to the same user account. ...
    (microsoft.public.windows.terminal_services)
  • AD reading from text file to create user account
    ... i want to set up an active directory for the computer lab, so that students can log into the computers using their ids and pwds. ... my second question is after i have created a user account is there a way i can prevent the users from loging into 2 or more computers simutanously. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to have access to recources without adding laptops to domain?
    ... All students have an account in our Windows 2003 Active Directory. ... No laptop computer accounts. ... Authentication should be based on the user account of the students, ... Our infrastructure contains several Cisco 1100 AP's, IAS radius server, 2003 ...
    (microsoft.public.windows.server.networking)
  • Set Group Policy to stop user installing any program
    ... Students like to install softwares on the ... LAN PC. ... Is there a group policy object to stop this behaviour? ... Students are sharing one user account. ...
    (microsoft.public.windows.server.sbs)
Loading