preventing all user installs

  • Thread starter Thread starter Steve
  • Start date Start date
S

Steve

I've used settings in gpedit to limit user installs, but
still users are installing some non-MS programs. Am I
missing a setting to prevent users from istalling any
software whatsoever?

Thanks in advance for assistance.

Steve
 
Exactly what settings did you implement? The best way would be to use Software
Restriction Policies using path/hash/certificate rules as described in the link
below. For instance if you restricted ntfs permissions on the root folder to where
users had read/list/execute permissions, then in a default installation the only
other place a user could save files would be their user profile. Then you could use
SRP to create a path rule to the my documents and settings folder with a disallowed
setting which would prevent them from running programs in their profile which would
include installing software. This all assumes you are talking about regular
sers. --- Steve

http://www.microsoft.com/technet/tr...et/prodtechnol/winxppro/maintain/rstrplcy.asp
http://support.microsoft.com/?kbid=310791
 
Back
Top