How to allow user to install the printer& fax drivers but not software

[Sarah]

Hi,
We are trying to control the laptop users not to install any additional
software on the laptop. The only way is to exclude the users from local
admin group. However they do need some rights to load drivers.
Is there a way to allow the user to install the printer driver and receiving
windows or anti-virus updates but not allow to install any other software?

I would appreciate any idea,
Thanks,
Sarah

 

[Lanwench [MVP - Exchange]]

Hi,
We are trying to control the laptop users not to install any
additional software on the laptop. The only way is to exclude the
users from local admin group. However they do need some rights to
load drivers. Is there a way to allow the user to install the printer
driver and
receiving windows or anti-virus updates but not allow to install any
other software?
I would appreciate any idea,
Thanks,
Sarah

Use WSUS for your workstation updates....I'm presuming these laptops have
some regular connectivity to your network. Not sure what antivirus suite
you're using, but if it requires that they have admin rights, ditch it!

Re printer drivers for non-admins - see whether granting them "load/unload
device drivers" permissions works - if you use AD, use group policy for
this. Otherwise, use the local policy editor.

http://support.microsoft.com/default.aspx?scid=kb;en-us;297780 may help.

 

[Sarah]

Hi Lanwench,

Thanks for your reply, it is very helpful.
I'm using WSUS to distribute the windows update, and Anti-Virus is using
symantec, currently I installed the unmanaged version on the laptop users,
without admin right, can it be updated?
Thanks,
Sarah
"Lanwench [MVP - Exchange]"

 

[Lanwench [MVP - Exchange]]

Hi Lanwench,

Thanks for your reply, it is very helpful.

Good - let us know if it works.

I'm using WSUS to distribute the windows update,
Cool.

and Anti-Virus is
using symantec, currently I installed the unmanaged version on the
laptop users, without admin right, can it be updated?

Use the corporate edition & have it contact the update servers over the
internet. I don't use SAV but I'm sure it can be done.

Thanks,
Sarah
"Lanwench [MVP - Exchange]"

Use WSUS for your workstation updates....I'm presuming these laptops
have some regular connectivity to your network. Not sure what
antivirus suite you're using, but if it requires that they have
admin rights, ditch it! Re printer drivers for non-admins - see whether
granting them
"load/unload device drivers" permissions works - if you use AD, use
group policy for this. Otherwise, use the local policy editor.

http://support.microsoft.com/default.aspx?scid=kb;en-us;297780 may
help.