Is there any way to disable the right of a user account to install any
software except only specific software, i.e.., definition file of antivirus
program?

Thanks,

Scott

Scott wrote:

> Is there any way to disable the right of a user account to install any
> software except only specific software, i.e.., definition file of
> antivirus program?

Perhaps, but since you gave zero information about your computer, the
operating system it's running, and whether this is a company machine in a
domain - I can't give you any specifics.

In a domain, users can't install anything. In a non-domain member machine
running XP Pro, you can set user account restrictions with Group Policy.
Antivirus programs that are designed well have no problems
self-updating/installing their virus definitions. Normally a user would not
ever need to hand-install virus definitions in their antivirus program. So
this is generally a non-issue.

If you really want focused help, please take the time to read at least some
of the information here:

http://www.elephantboycomputers.com/page2.html#Usenet
http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a Question
http://users.tpg.com.au/bzyhjr/liszt.htm - How Not to Get Technical Help on
Usenet
http://www.catb.org/~esr/faqs/smart-questions.html

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

"Malke" <(E-Mail Removed)> 在郵件
news:(E-Mail Removed) ä¸*撰寫...
> Scott wrote:
>
>> Is there any way to disable the right of a user account to install any
>> software except only specific software, i.e.., definition file of
>> antivirus program?
>
> Perhaps, but since you gave zero information about your computer, the
> operating system it's running, and whether this is a company machine in a
> domain - I can't give you any specifics.
>
> In a domain, users can't install anything. In a non-domain member machine
> running XP Pro, you can set user account restrictions with Group Policy.
> Antivirus programs that are designed well have no problems
> self-updating/installing their virus definitions. Normally a user would
> not
> ever need to hand-install virus definitions in their antivirus program. So
> this is generally a non-issue.
>
> If you really want focused help, please take the time to read at least
> some
> of the information here:
>
> http://www.elephantboycomputers.com/page2.html#Usenet
> http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a
> Question
> http://users.tpg.com.au/bzyhjr/liszt.htm - How Not to Get Technical Help
> on
> Usenet
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
> www.elephantboycomputers.com
> Don't Panic!


Malke,

Thanks for your rich information and I will take some time to read them on.

The computer is running Windows XP Pro or Vista business on a domain
environment. The user is given a power user right and they can't install a
big software but can install Skype, MSN, etc. As you mentioned Group
Policy, how can we stop them completely not to install any software. It
will minimize lots of issues.

Thanks,

Scott

Scott wrote:

> Thanks for your rich information and I will take some time to read them
> on.
>
> The computer is running Windows XP Pro or Vista business on a domain
> environment. The user is given a power user right and they can't install
> a
> big software but can install Skype, MSN, etc. As you mentioned Group
> Policy, how can we stop them completely not to install any software. It
> will minimize lots of issues.

The very first thing you do is make your users regular users. Don't have
anyone be a power user. There is no reason to have anyone in that category.
You can ask further questions about your company setup in the server
newsgroup that is specific to the server OS you're running or in the
general server newsgroup. Since you have a domain, you're going to be
controlling things centrally anyway, not from the client side.

Here is a list of all the MS newsgroups so you can find the right one for
your situation:

http://aumha.org/nntp.htm

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!