Securing Windows 2000

  • Thread starter Thread starter Phillip Armitage
  • Start date Start date
P

Phillip Armitage

Project managers and partners at my firm have started to complain about
employees spending all of their time on instant messenger. I've advised
these people that, yes, I could remove the software, but as things currently
stand these users could simply re-install the software tomorrow.

I understand that, using system policies, that I should be able to configure
these systems so that only the administrators account has the right to
install new software.

Can anyone suggest some references material and/or how-to's which would
explain how to implement these policies.

I look forward to your comments and suggestions.
 
If you are on an AD network, take away add/remove software permissions from
normal users as an AD policy

On a basic domain, use poledit to do the same thing.
 
I didn't think regular users could install software (but I realize there are
exceptions)?
What about blocking the instant message communications at the firewall
level? Or what about installing a firewall on the workstation themselve?
 
Back
Top