RE: Restriction on software installation

Hello Lary,

Thank you for your kind update.

Yes, by default, every domain user can logon every computer which join SBS
domain. However, one user can only be local administrator for his/her own
computer. Since he/she can logon the other computers, he/she is only a
member of Users group. He/she cannot install any application on the others
computer. Therefore, you do not need to do anything.

If you like, you can force the user account can only to logon his/her own
computer:

1. Open Server Management console on SBS

2. Extend Standard Management->Users

3. Double click the user account, select Account tab

4. Click Log On To button

5. Select "The following computers", add his/her own computer to the list

6. Click OK twice

Then the user can only logon his/her own computer.

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Restriction on software installation
| thread-index: AcfD6yyl4zpSO+xkTWOD+SDB8tOuGA==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?TGFyeQ==?= <Lary@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <C7ED396C-03D8-4981-8E63-3B7D82625F61@xxxxxxxxxxxxx>
<xqu0a93wHHA.5836@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: Restriction on software installation
| Date: Wed, 11 Jul 2007 11:42:03 -0700
| Lines: 19
| Message-ID: <E9840314-7702-47D6-9AD4-D84B558DF201@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 8bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:49825
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Terence,
|
| Thanks for your reply.
|
| Since I canâ??t restrict internet access with SBS03 Standard, I guess
Iâ??ll
| stick with the restriction on installation of software.
|
| At issue is that I have a user that, inadvertently installed malicious
| intrusion spamware while surfing the net. Unfortunately, I could not
safely
| remove the malware and ended up flattening the computer and reinstalling
the
| OS and apps instead.
|
| My next question is that since this user can and needs to log into other
| available computer, can I do the restriction through group policy rather
on
| each individual machine? And if so, can you detail out the instructions
since
| my skills with GP are limited?
|
| Thanks in advance.
|
|

.

Loading