Remove install rights

[Denzuku]

Hi,

How can I remove the rights to install programs from the
Power User group or Local Administrator group?

 

[Colin Nash [MVP]]

Hi,

How can I remove the rights to install programs from the
Power User group or Local Administrator group?

"Install programs" is not a specific right that you can simply give or take
a way. Instead, this ability comes from a combinations of permissions to
areas of the file system and registry. No matter what you do, an
administrator would always be able to get around it.

If you want to tighten things up for Power Users, have a look at the
permissions on the Program Files and Windows folders, and on registry keys.
However, why bother making them Power Users???

The real solution is not to make those people Administrators or Power Users.

 

[Guest]

Hi,

I need to give the user Local Admin rights as one of the
program they use need to have admin rights. However, I do
not want the user to be able to install unnecessary
program into their PC.
Any idea which registry key need to be secure?

 

[Guest]

There's a better way to do this. Setup your user as a member of the "User"
group and then have them run the application as "Administrator". Take a look
at the link to see how to set this up. I'm doing this on a couple of users
that have to run old applications and it works pretty well.

http://support.microsoft.com/default.aspx?scid=kb;en-us;294676&sd=tech

Good Luck,

-John