Discussion Locked

Power Users - lock down installing apps

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have to give my users power user access in order for a particular application to work correctly, however I don't want them to be able to install applications.

Is there a way to lock this down.

2 replies

by beermonster

Hi,
The best option for you will be to track down why the particular app isn't working. Download regmon and filemon from sysinternals.com, these utils will track every file and registry access taking place when running the app. Log in as an admin, start the utils, then use 'runas' to run the program as a normal user (NOT a power user). when the app fails, stop regmon and filemon then look thru the output of each looking for 'access denied' messages. This will pinpoint exactly which areas of the registry \ filesystem you need to open security on, open each area only as much as is needed to run the app. repeat the process until you can successfully run the app as a standard user. Once you have located the problems you can then replicate the security settings across your estate. Let me know if you have any questions \ problems - darthurs@hotmail.com

by jeaster

Use group policy to rtestrict the user from running any type of installation applet (i.e. setup.exe, install.exe, *.msi, etc)

This discussion is closed to new replies.