Keeping people from installing

[johnfli]

What is the setting that I need to do that will keep people from installing
software on their machines?
Telling them not to is like trying to teach a pig to sing.

It seems like when I try to install a valid program it wont let me and I
have to use teh 'run as' feature, but yet teh users are able to install
yahoo messenging etc.

 

[C Hall]

John,

By default, standard domain users can't install software.

 

[Jim Singh]

You can use GPOs to enforce this settings. Once configured it will dissallow
all the users from installing any apps with .exe extension. Alternatively,
you can take away the power users right from the users and deny the local
rights to the machine.

-Jim

 

[johnfli]

What is the setting for not installing apps with an .exe extension yet allow
them to run programs still?

 

[johnfli]

We have this one piece of crap app that for anybody to be able to run it,
they need to be in teh power users group.