This may not be the ultimate answer you're looking for, but at least it's a
couple of ways to do it:
These methods address how to exclude either Groups or the Current User, rather
than an individual User, from running certain application files.
For the Groups:
Log on as Administrator.
Go to Control Panel > Users and Passwords and note which Group the user is in.
Search (including subfolders) for all *.exe files on your C drive.
Right click on one of the files to restrict and then select Properties >
Security [tab].
Verify that the applicable Group is included in the list, if not, add it.
Select the Group and then select Deny for all applicable permissions.
You could continue to do all others required, but I'd suggest testing this one
first.
For all Current Users:
Here's an alternative method which would effect any current user:
Restrict Users from Running Specific Applications
http://www.winguides.com/registry/display.php/969
I've never tried this one. It appears that it may also lock-out the Admin so be
careful. Test (all users) on a single app (like Notepad.exe) first.
Regarding your second question, yes, installation of all apps should be done by
the Admin or a user with Admin previlages. Other user groups are either not
allowed or limited to what they can install (that's by design).
Hopefully someone else will jump in here with a simpler approach...maybe even
suggest a utility to do what you want.
Good luck!
| Finished my Windows 2000 Pro install last night - wow, love this OS! I've done
installs
| of 98SE and XP and Win2000 rocks!
|
| 1) I'm still learning this OS, I can't find the answer to this one - can I set
users
| permissions to be able to run certain programs? I'd like to set up a user
where only
| certain programs can be run, and others denied.
|
| 2) To do (1), regardless, are all programs installed while logged in as
Administrator
| anyway?
|
| Thanks,
|
| Bill.
|
|
