Lock down Desktops

[Sam Ramsey]

What is the best way to lock down user desktop computers
so they dont download and/or install software. Currenlty
users are administrator of their local computer and are
installing software off the internet and they dont even
know it (spyware). All the desktops are in Windows 2000
domain if that helps.

Thanks.

-Sam

 

[ThePsyko]

What is the best way to lock down user desktop computers
so they dont download and/or install software. Currenlty
users are administrator of their local computer and are
installing software off the internet and they dont even
know it (spyware). All the desktops are in Windows 2000
domain if that helps.

Thanks.

-Sam

I have clients that have successfully used Deep Freeze on their network

--
/(bb|[^b]{2})/ that is the Question

ThePsyko
Public Enemy #7
http://prozac.iscool.net

 

[Steven L Umbach]

You could try to populate the disallowed Windows Program list in Group Policy with
programs including install.exe and setup.exe but that will only stop the least
knowledgeable users as renaming files will bypass that policy. Realistically you can
not lock down a user that is administrator of their computer if they understand the
power of that account. You may have much better luck if you have XP Pro computers and
use Software Restriction Policies. A signed user policy with enforced consequences
may also be something to consider and you may want to rethink why they need to be
local administrators which usually is due to running software applications that may
have workarounds.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;323525

 

[Jeff Cochran]

What is the best way to lock down user desktop computers
so they dont download and/or install software. Currenlty
users are administrator of their local computer and are
installing software off the internet and they dont even
know it (spyware). All the desktops are in Windows 2000
domain if that helps.

Remove local admin access to start. Or invest in products that block
spyware.

Jeff