detecting installs

[Cliff]

for some reason, I cannot convince 17 adult professionsla to NOT install
CRAP onto the Terminal Server.

Since I cannot convince them of this, is there some way for me to track or
see who has installed a software package?

I just logged into the TS box for maintenance and see seven new third party
memory manager, porn stopper and other misc crap programs installed and I'd
like to find out who did it and beat them with a wet noodle.

Thanks.

Cliff

 

[Rob Leitman \(MS\)]

Can you make them non-admins?

Rob

 

[Cliff]

Well, I could but there are several programs that they could not run if I
make them non-admins. I could disable the ability to install software in
group policy I guess...

 

[Cláudio Rodrigues]

For sure they could run anything as regular users. It is just a matter of
tweaking the TS for that.
Use REGMON/FILEMON from sysinternals.com to find what gets denied for
regular users (registry keys access, files etc). Then just give permissions
on these and apps should work fine.
Giving regular users admin privileges in a TS is like shooting your own
foot.

--
Cláudio Rodrigues

Microsoft MVP
Windows Technologies - Terminal Services
http://www.terminal-services.net