Uninstalling programs on clients

[Nicolas Macarez]

Hi you all!
My configuration is as follows:
Win2K Server fully patched running as a single domain controller; 30 clients
running WinXP Pro SP2.
I am new on the network and someone before me set up "somewhere" a policy
that prevents the users to uninstall programs on their own client PC. The
users belong to the local Admin group of their own computer. They can even
install programs.
I had a look on a few locations: Controller security policy, Domain
controller security policy, Domain security policy, Group Policy
(gpedit.msc), local security policy on the clients... but I still can't find
where I can enable the uninstalling of the programs.
Help greatly appreciated.
Thanks,
Nicolas

 

[lforbes]

Hi you all!
My configuration is as follows:
Win2K Server fully patched running as a single domain
controller; 30 clients
running WinXP Pro SP2.
I am new on the network and someone before me set up
"somewhere" a policy
that prevents the users to uninstall programs on their own
client PC. The
users belong to the local Admin group of their own computer.
They can even
install programs.
I had a look on a few locations: Controller security policy,
Domain
controller security policy, Domain security policy, Group
Policy
(gpedit.msc), local security policy on the clients... but I
still can't find
where I can enable the uninstalling of the programs.
Help greatly appreciated.
Thanks,
Nicolas

Hi,

Local Admins can uninstall software if they have Modify access to it.
It may be a permissions issue. Someone may have removed the
administrators "delete" permissions on their local machines.
However, they can always take ownership and take them back again.

Group Policy doesn’t limit either installing or uninstalling. This is
a permissions issue.

Cheers,

Lara

 

[Nicolas Macarez]

Thanks Lara
However, I don't clearly see what you mean by "take ownership" of
permissions: I know about taking ownership of folders or files on an NT
machine, but can't find where I can recover ownership on "permissions"...
Yours truly,
Nicolas

Hi,

Local Admins can uninstall software if they have Modify access to it.
It may be a permissions issue. Someone may have removed the
administrators "delete" permissions on their local machines.
However, they can always take ownership and take them back again.

Group Policy doesn't limit either installing or uninstalling. This is
a permissions issue.

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-Uninstalling-programs-clients-ftopict345936.html
Visit Topic URL to contact author (reg. req'd). Report abuse:

http://www.windowsforumz.com/eform.php?p=1087029

 

[lforbes]

Thanks Lara
However, I don't clearly see what you mean by "take ownership"
of
permissions: I know about taking ownership of folders or files
on an NT
machine, but can't find where I can recover ownership on
"permissions"...
Yours truly,
Nicolas


 > > Hi you all!
 > > My configuration is as follows:
 > > Win2K Server fully patched running as a single
domain
 > > controller; 30 clients
 > > running WinXP Pro SP2.
 > > I am new on the network and someone before me set
up
 > > "somewhere" a policy
 > > that prevents the users to uninstall programs on
their own
 > > client PC. The
 > > users belong to the local Admin group of their own
computer.
 > > They can even
 > > install programs.
 > > I had a look on a few locations: Controller
security policy,
 > > Domain
 > > controller security policy, Domain security
policy, Group
 > > Policy
 > > (gpedit.msc), local security policy on the
clients... but I
 > > still can't find
 > > where I can enable the uninstalling of the
programs.
 > > Help greatly appreciated.
 > > Thanks,
 > > Nicolas
abuse:
http://www.windowsforumz.com/eform.php?p=1087029

Hi,

I meant Take Ownership of files/folders. Basically right click the
Drive C:\ and set to Administrators = Full Control, Local Users =
Read, System = Full Control and then click OK. Do this for also the
Windows Directory, the system32 directory and the Program Files
Directory. If it comes up with errors about permissions then you will
need to take ownership.

Cheers,

Lara