xp profiles

[Robyn]

hello I am an IT tech. my company is looking to lock down
the users pc not because we want to control them but to
stop users from installing spy ware programs on there
work pc.

Our company at this time is growing fast and spread out
thought-out the USA. We do not have pc on a domain
structure yet.

We know that we can set the users profile to limited in
windows xp pro.
Here is our problem our IT in one location we service as
I just said through out the country. There is no way for
us to be able to have techs at user's sites. We use
remote software to fix problems the user have.

We have learned when a user tries to install software
they get a box that pops up and tells them they need to
call there administrator to install software.
We can walk the user through logging off there profile
and longing onto the administrator profile to allow us to
install the software. But now the user knows the admins
password. So why do even limit the user's profile.

What would like is this we can remote to the users
profile while they are logged onto there limited profile.
When we try to install software a box pops up asking for
the admin password. Since we are logged on remotely the
IT can type it in. the software would start installing.

Can some one please point me in the right direction to
help us with the company problem?


Please help

 

[edubbs]

Just to let you know, limiting the user's ability to
install programs will not prevent spyware from being installed.

We have everything locked down pretty tight, but spyware
manages to get on the pcs, sometimes with no prompting at
all (drive-by installation). This happens regardless of
the rights held by the user.

E

 

[Robyn]

you are correct
but it should prevent users from downloading yahoo hotbar
or other stuff like that has a ton of spyware in it

 

[Roger Abell]

Most of the capability you seem after is designed into
the domain environment. If you are geo-distributed and
growing fast, then you may want to bring up the fact that
moving to a domain would likely result in a net savings
as result of centralized management of the PC infrastructure.

Anyway, once you have remoted in, have you tried to open
a cmd prompt using RunAs, specifiying an admin account,
and then launching whatever is needed, like the installer
from within this cmd prompt ??