Software Restriction policies

[Guest]

Hello,

I am want to my domain users not to install any software on local computer
which is in domain. I think this can be restricted using Software Restriction
Policies, but I am not able to locate it in gpedit. I have Windows 2000 Adv
Server.

Is there anything needs to be installed to get this option in gpedit
snap-in...

thanks in advance...

 

[Kevin D. Goodknecht Sr. [MVP]]

Hello,

I am want to my domain users not to install any software on local
computer which is in domain. I think this can be restricted using
Software Restriction Policies, but I am not able to locate it in
gpedit. I have Windows 2000 Adv Server.

Is there anything needs to be installed to get this option in gpedit
snap-in...

As close as you can get to this in a GPO is to disable access to Add Remove
programs. This won't stop other installation programs from running.

The best way to do this is to make domain users normal users on the local
machine. Normal users cannot install programs. They also cannot remove the
computer from the domain, which is important on laptops.
Making users normal users won't prevent them from using "Run as" to install
or run programs as a local computer administrator. Just make sure they don't
have access to an administrator password.

 

[Paul Bergson]

If users don't belong to the "Administrators" group on their local machines
they can't update the registry, this will stop almost all software install.
Removing them from the "Power Users" group should pretty much eliminate them
from installing anything else.

If you want to have the users install software that you want them to you can
use Group Policy and distribute it that way.

http://support.microsoft.com/default.aspx?scid=kb;en-us;816102

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.