General discussion


NT4.0 TS- prevent sw installs

By neondioncc1 ·
What are some ways to lock down access and prevent Citrix users from installing software on Windows NT4.0 Terminal Services. I have tried quite a few things.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by p.j.hutchison In reply to NT4.0 TS- prevent sw inst ...

A few things you can try:
a) Only make users member of Users or Domain Users (not Power or Administrator)
b) Change ACLs on HD
e.g. C = Everyone:Read, Admins:FC
C:\Program Files =Everyone:Read, Admins:FC, Power Users:RW
C:\Winnt = Everyone:Read, Admins:FC, Power Users:RW
C:\Winnt\Profiles = Everyone:Read, Admins:FC, Individual folders for users = FC
C:\Temp = Everyone:RW (or wherever Temp is)

That should lock it down enough to prevent software installs. It will need fully testing in case an app fails, modify ACLs for folders/files for this.

Related Discussions

Related Forums