Windows Forum

Ask something
Discussion Locked

Preventing Users from Installing Apps

0 helpful
7 replies

by nschloss

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Our users are on Windows 2000. Select users have been given local administrator privileges so that certain applications will work on their PC e.g. Palm Hot Synch Manager. Granting full access to the application folders alone (at a file and registrylevel) didn't get them going - only when local admin rights were granted. Users have discovered, however, that they can now install any software on their PC. Is there a way to disable them from installing software short of removing admin privileges? Is there a way to run Hot Synch Manager without granting admin privileges?

7 replies

by pan 13 x

in the local security policy , you can set in depth policy for users. You can also modify that the registory as only read access to it also.
If you disable access the wininstaller by user name , you can stop 99.9 5 of the attempted installs on a system.

by hjs

You only need admin rights to install hot synch not run it. We do it all the time. Once it's installed and config'd remove them from the admin group.

by penguinsrule

If you want to 100% make sure that you allow people to have exactly the security that you want them to have, then please run OpenVMS!! Even though NT/2000 is an outright copy of VMS it still does not have the level of robustness in security that OpenVMS has. Maybe they'll get it right in a few years.

Long live VMS

Rick

Yes, David Cutler wrote both VMS and NT, and it was created at DIGITAL for those of you who give Microsoft any credit whatsoever for NT - which it deserves no credit except for the fact that they successfully committed thievery and were able to market it to the world in a way DIGITAL could never do.

This discussion is closed to new replies.