preventing all user installs

[Steve]

I've used settings in gpedit to limit user installs, but
still users are installing some non-MS programs. Am I
missing a setting to prevent users from istalling any
software whatsoever?

Thanks in advance for assistance.

Steve

 

[Steven L Umbach]

Exactly what settings did you implement? The best way would be to use Software
Restriction Policies using path/hash/certificate rules as described in the link
below. For instance if you restricted ntfs permissions on the root folder to where
users had read/list/execute permissions, then in a default installation the only
other place a user could save files would be their user profile. Then you could use
SRP to create a path rule to the my documents and settings folder with a disallowed
setting which would prevent them from running programs in their profile which would
include installing software. This all assumes you are talking about regular
sers. --- Steve

http://www.microsoft.com/technet/tr...et/prodtechnol/winxppro/maintain/rstrplcy.asp
http://support.microsoft.com/?kbid=310791