Deny program installation

[Lorenzo]

Hello,

on a Win XP workstation my purpose is deny possibility
for the local user(no domain) to install ANY program. Is
there a user type that matches this requirement. If not,
is there some kind of policies?

Thank you

 

[Paul [MSFT]]

Hi Lorenzo,

The default permissions for the built in "Users" group prevents installing
applications.

To test this in Windows XP professional:

1) Open Control Panel / User Accounts
2) Select a test user account and choose Properties
3) On the Group Membership tab select "Restricted User".
4) Click "Apply".
4) The permissions granted include: users can operate the computer, run
programs and save documents but cannot install programs or change system
settings.
5) Log off and then log on with this test user account and test installing
an application.

Please let me know if this helps.


=========

This posting is provided "AS IS" with no warranties and confers no rights.

=========
Paul Hayes, CISSP, MCSE
PSS Security
Microsoft Corporation
425-704-3653
(e-mail address removed)


--------------------