Windows Forum

Ask something
Discussion Locked

NT4.0 TS- prevent sw installs

0 helpful
1 reply

by neondioncc1

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What are some ways to lock down access and prevent Citrix users from installing software on Windows NT4.0 Terminal Services. I have tried quite a few things.

1 reply

by p.j.hutchison

A few things you can try:
a) Only make users member of Users or Domain Users (not Power or Administrator)
b) Change ACLs on HD
e.g. C:\ = Everyone:Read, Admins:FC
C:\Program Files =Everyone:Read, Admins:FC, Power Users:RW
C:\Winnt = Everyone:Read, Admins:FC, Power Users:RW
C:\Winnt\Profiles = Everyone:Read, Admins:FC, Individual folders for users = FC
C:\Temp = Everyone:RW (or wherever Temp is)

That should lock it down enough to prevent software installs. It will need fully testing in case an app fails, modify ACLs for folders/files for this.

This discussion is closed to new replies.