General discussion


Power Users - lock down installing apps

By jengianfrancesco ·
I have to give my users power user access in order for a particular application to work correctly, however I don't want them to be able to install applications.

Is there a way to lock this down.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by BeerMonster In reply to Power Users - lock down i ...

The best option for you will be to track down why the particular app isn't working. Download regmon and filemon from, these utils will track every file and registry access taking place when running the app. Log in as an admin, start the utils, then use 'runas' to run the program as a normal user (NOT a power user). when the app fails, stop regmon and filemon then look thru the output of each looking for 'access denied' messages. This will pinpoint exactly which areas of the registry \ filesystem you need to open security on, open each area only as much as is needed to run the app. repeat the process until you can successfully run the app as a standard user. Once you have located the problems you can then replicate the security settings across your estate. Let me know if you have any questions \ problems -

Collapse -

by jeaster In reply to Power Users - lock down i ...

Use group policy to rtestrict the user from running any type of installation applet (i.e. setup.exe, install.exe, *.msi, etc)

Related Discussions

Related Forums