restrict users from installing software

[amt]

I need to restrict users from installing software on the
workstation. I asume this would need to be a security
policy. This would need to be done without restricting the
administrator. I would also like to restrict the use of
windows key + E or windows explorer.

any help at all?

I would be very greatful

Brent

 

[Jerry]

Check Group Policies.

 

[Touch Base]

File Sharing and Permissions in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q304040


"Windows XP allows for five different levels of permissions. Level 1 is the most private and secure setting and Level 5 is the most public and changeable (non-secure) setting. You can configure Levels 1, 2, 4, and 5 by using the Simple File Sharing UI. To do so, right-click the folder, and then click Sharing and Security to open the Simple File Sharing UI. To configure Level 3, copy a file or folder into the Shared Documents folder under My Computer . This configuration is not affected when you enable or disable Simple File Sharing. This article describes the different ways to configure access to your files into distinct levels. The levels defined in this article are not documented in the operating system or Help files. The levels are described in this article for purposes of reference and understanding."

http://www.winguides.com/registry/display.php/969/
This setting allows you to specify applications and filenames that users are restricted from running.

 

[Star Fleet Admiral Q]

If you are using the "NTFS" file system, and the users are not
Power/Administrator users, then they shouldn't be able to install
software. Also, making the same assumption, and you have not enabled
viewing of system/program files and directories via either Local
Security or Group Policies, limiting the use of Windows+E is also a
mute point, as the user will only be able to browse his/her own
folders or common shares. They'll be able to see the folders, but
when clicked on, they will either get a forbidden message or no file
listing.

Of course, if the file system is FAT (i.e. FAT16/32) then you'll need
a 3rd party product (if anyone still makes them) to handle this
situation as the security descriptor bits or not available on FAT file
systems - suggest if this is true, convert the file systems to NTFS.