Re: Set Group Policy to stop user installing any program



In news:uazp3yLaGHA.3896@xxxxxxxxxxxxxxxxxxxx,
Geoff <geoff@xxxxxxxxxxx> typed:
Thanks Lanwench

Your suggestion is exactly what I think as well.
Just a quick explain about why they use one account for multiple
people. Baiscally they don't want to pay CALs ( currently they've
only got 5Cals. However, this account is only intended for students
to log in and browse internet. So it is fine

Cheers

Hmmm - I'm not a licensing expert (I think nowadays you need a special
purple robe and enchanted chicken foot to be one) but I'm fairly certain
that saying "Hey, Microsoft, I have a 5-user license and 30 users but they
all use the same login, so we're kosher" isn't going to fly. You might call
MS or a reseller to get the straight dope.



Geoff
"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:O2llW97ZGHA.2376@xxxxxxxxxxxxxxxxxxxxxxx


In news:eu78b11ZGHA.3496@xxxxxxxxxxxxxxxxxxxx,
Geoff <geoff@xxxxxxxxxxx> typed:
Guys

One of my clients is a college. Students like to install softwares
on the LAN PC.

Is there a group policy object to stop this behaviour?

Their OS is SBS 2003 std with 20 Win XP PC.
Students are sharing one user account. This means we may put as many
restrictions as we want without affecting other staff

Thank you very much

Geoff


Well, a couple of thoughts:

1. All users should have "user" rights only, and not be in the local
administrators or power users group (either by individual name or
group membership)
2. You can use software restriction policies to allow or deny
application usage
3. I don't recommend that you have all users sharing one account,
generally speaking. What's the justification for this? How are they
expected to use Exchange? How can you control whether someone deletes
someone else's files?
4. You can use a mandatory user profile if you wish.

I guess 4 is no longer a couple, but a few. :)


.

Relevant Pages

  • Re: SQL 2005 Cluster install error/Group cannot be validated
    ... Geoff thanks for the information! ... My Sql database service and Analysis service install failed when I tried to ... Senior SQL Infrastructure Consultant ... different domain admin account but again the same error. ...
    (microsoft.public.sqlserver.clustering)
  • Re: Set Group Policy to stop user installing any program
    ... Just a quick explain about why they use one account for multiple people. ... this account is only intended for students to log in and browse ... You can use software restriction policies to allow or deny application ... I don't recommend that you have all users sharing one account, ...
    (microsoft.public.windows.server.sbs)
  • Re: SQL 2005 Cluster install error/Group cannot be validated
    ... Yes I've tried adding sql service and sql analysis service accounts to all ... different domain admin account but again the same error. ... "Geoff N. Hiten" wrote: ... I'm installing 2 node failover SQL 2005 cluster. ...
    (microsoft.public.sqlserver.clustering)
  • Re: Service account in cluster sql 2008
    ... account for all SQL server services" ... I read Geoff write in the forum which is: ... Do not use a domain adming or a local admin account. ...
    (microsoft.public.sqlserver.clustering)
  • Re: server/password problem
    ... Try removing the account and closing and reopening OE and then adding it back again. ... "Geoff" wrote in message ... broadband is open but when trying to receive keep getting password logon ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)