Restricting Install of Software for Power User

[Jim Green]

We have an aplication that requires the user to be set to Power User.

What is the best way to restrict this user from installing software on the
local machine. Im sure its through the group policy editor but cannot find
anything that applies to the restriction of installing software.

Thanks for your help.

Desktops: Window 2000 Pro
Server: Windows 2000 Server

 

[Steven L Umbach]

Being a power user will give him the ability to install some software. You may try to
see if you can contact software publisher and find out if there are any ntfs/registry
permissions you can change to allow him to use the application while a regular user.
You may be able to use regmon and filemon from Sysinternals to do that on your own.
MS also has a compatws.inf template that can be applied to loosen default security to
allow regular users to run some older applications. It will give user ntfs
permissions similar to a power users, but not allow them to have additional power
user rights. --- Steve

http://www.sysinternals.com/
http://support.microsoft.com/default.aspx?scid=kb;en-us;269259
http://www.microsoft.com/windows2000/techinfo/planning/security/secdefs.asp --- Describes
power users abilities.

 

[Jim Green]

Thanks, I did contact the vendor and assigned the users read write to a
specific directory which fixed the problem, thanks for your response!