preventing small app installs like IRC, Hotbar, etc.

[Mike]

Even on machines locked down fairly tight, users can still
sometimes install little Yahoo Mail/Messenger type apps.
or little customizations like Hotbar etc. Very
annoying.

Is there any way to prevent ANY change to a desktop, and
yet provide some amount of flexibility - for example, I
need my users to be able to Add Printer (since MS in it's
infinite wisdom made Printers part of KKEY_USER instead of
HKEY_LOCAL_MACHINE). And in order to do that, I've (for
the time being) made the standard desktop user login a
Power User.

Unfortunately, the client does not yet have AD, so all of
my lockdowns are manual reg hacks at this point.

Thanks,

Mike

 

[oklier]

restricted user. unfortunatly you'll have to install the
printers as local and then change the ports. this way any
user will have the printers automatically installed. I
agree on the MS printers thing. I hope they fix it. Its a
major PITA.

 

[Mike]

Yeah, it's a real pain alright.

What is this you do - add a local (LPTx) printer as Admin,
then have those printer(s) avail as all the other users?
I never thought of that. How do you change the ports -
thru the GUI as a restricted user? I guess so since a
Restricted User couldn't get into the registry (?).

Thanks for your input.

Mike

 

[oklier]

yep install the printers to a local port. once installed
go into the printer properties and then add port and
point it to the printers IP. All this has to be done via
Admin rights. then when a restricted users logs in they
have the printers to use.

 

[oklier]

yep install the printers to a local port. once installed
go into the printer properties and then add port and
point it to the printers IP. All this has to be done via
Admin rights. then when a restricted users logs in they
have the printers to use.