Re: Set Group Policy to stop user installing any program



Thanks Lanwench

Your suggestion is exactly what I think as well.
Just a quick explain about why they use one account for multiple people.
Baiscally they don't want to pay CALs ( currently they've only got 5Cals.
However, this account is only intended for students to log in and browse
internet. So it is fine

Cheers

Geoff
"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:O2llW97ZGHA.2376@xxxxxxxxxxxxxxxxxxxxxxx


In news:eu78b11ZGHA.3496@xxxxxxxxxxxxxxxxxxxx,
Geoff <geoff@xxxxxxxxxxx> typed:
Guys

One of my clients is a college. Students like to install softwares on
the LAN PC.

Is there a group policy object to stop this behaviour?

Their OS is SBS 2003 std with 20 Win XP PC.
Students are sharing one user account. This means we may put as many
restrictions as we want without affecting other staff

Thank you very much

Geoff


Well, a couple of thoughts:

1. All users should have "user" rights only, and not be in the local
administrators or power users group (either by individual name or group
membership)
2. You can use software restriction policies to allow or deny application
usage
3. I don't recommend that you have all users sharing one account,
generally speaking. What's the justification for this? How are they
expected to use Exchange? How can you control whether someone deletes
someone else's files?
4. You can use a mandatory user profile if you wish.

I guess 4 is no longer a couple, but a few. :)



.



Relevant Pages

  • Re: Unicycle articles (but wait theres more...)
    ... I was issued my X.500 account. ... undergraduate students fail to set up forwarding systems and, instead, ... reciprocity doesn?t just go forward by itself as I found out when I ... North Dakota. ...
    (rec.sport.unicycling)
  • Re: Overhelmed by student password resets. Discussions on best way to let students use .asp page pas
    ... > 1) New students would receive the windows AD account and temporary ... > is information entered accordingly in SQL db for such student account. ... > and request password reset right there. ... > would be sent to the lab manager upon each request for password recovery. ...
    (microsoft.public.win2000.security)
  • Re: Stolen computer recovered but has password
    ... Re-install Windows XP from scratch after formatting the drive. ... Microsoft makes it way too difficult to secure a computer properly. ... administrator account and your personal account ... > students who came into the building late in the afternoon. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Stolen computer recovered but has password
    ... operating system to a pristine state after backing up your data files [and ... > students who came into the building late in the afternoon. ... > account. ...
    (microsoft.public.windowsxp.security_admin)
  • Not able to get online with User account but OK with Admin
    ... students cannot get online using ... their 'user' account, except one that is the Wireless ... Broadband network website, with all their links, but not ... restore to when they could get online. ...
    (microsoft.public.windowsxp.general)