Discussion Locked

Preventing users from installing Apps

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We are rolling out 100+ XP Pro machines. I am creating a Ghost image of a test machine we will use on all the others. We want to restrict the ordinary user from being able to install anything on their computer. The problem is: A certain application ( an email client called ExpressIT ) will not run unless the user has Power User, as an example, rights. I've learned that there are Computer application installs ( such as Office 2003 ) that are available to all users and User application installs ( such as the one above ) that require rights equivalent to the user that installed the app for it to be run by everyone. I've edited the registry to allow the ordinary user account permissions to the applications' directory, but this didn't work. I've configured the computer policy to only "Allow installations with elevated privledges" but this didn't work. Any ideas??

4 replies

by jschein

There are some free utilities on the web. Do a search on google for : free+regirty+monitor

Find one to your liking. With a fresh pc, install this program... activate it... Now, install your ExpressIT and note registry mods. Now open ExpressIT and note additional registry mods.

Now you have all the links the program will utilize. Use regedt32 and change the security of those tree listings to every has read / write / full control. Make your ghost image.

If you do it this way, there's no need in applying a full application access in your active directory / server policys.

Good luck

This discussion is closed to new replies.