Prohibit users from changing program settings

[steve simpson]

Hi all

I need to enforce a policy that forbids users from changing the
settings for a specific program and service both when thye are logged
on to the domain and when they are away (laptop computers).

How can I do that?

Thanks!

 

[Tomasz Onyszko]

Hi all

I need to enforce a policy that forbids users from changing the
settings for a specific program and service both when thye are logged
on to the domain and when they are away (laptop computers).

How can I do that?

If by service You mean standard windows service don't give them local
administrator priviledge or power users priviledge on their computers

And if it comes to specific programs I'm not able to give you specific
solution for all programs, You have to check what priviledges they need
to change this settings (maybe write rights to some specific registry
keys) and set needed ACL's on NTFS and registr to prohibit them from
changing program settings