General discussion

Locked

Prevent User Installations?

By NT-Gill ·
I maintain over 80 Windows NT workstations in an NT domain. A great deal of my time is spent troubleshooting issues I believe are due to little web utilities and downloads the users find cute. Is there a way to prevent users from installing applications to their PC with their NT accounts. The solution must include DOS based applications as well, though this is not as critical. Setting folder permissions is out of the question.

If there is no straight-forward method is their a way to create an alert or message?

This conversation is currently closed to new comments.

16 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Prevent User Installations?

by wildmcp In reply to Prevent User Installation ...

Grant the users only USER rights to the domain and make sure that none of them are listed under the Administrators group on the individual machines.

Collapse -

Prevent User Installations?

by NT-Gill In reply to Prevent User Installation ...

My users are are already Domain Users only. Some utility programs are able to install without Administrator rights.

Collapse -

Prevent User Installations?

by SyscoKid In reply to Prevent User Installation ...

Have you looked into the Zero Administration Kit? It's supposed to be able to prevent users from installing software.

See http://support.microsoft.com/support/kb/articles/Q170/2/71.ASP

Collapse -

Prevent User Installations?

by NT-Gill In reply to Prevent User Installation ...

No I haven't. It looks like a full featured deployment tool. I'm looking for a simple straight-forward method without installing additional software.

Collapse -

Prevent User Installations?

by DC1 In reply to Prevent User Installation ...

The zero admin kit from microsoft is a good utility. You could also implement system policies and lock down the computers/users that way.

Collapse -

Prevent User Installations?

by NT-Gill In reply to Prevent User Installation ...
Collapse -

Prevent User Installations?

by allan In reply to Prevent User Installation ...

What we've done is implament "System Policies" that will allow only specified programs to run.
The users will download tjings but cannot run the exe to in stall or run an unwanted program.
This can be an administrative headache but by using GlobalGroups and using seperate Policies for each, it's not too bad.

Collapse -

Prevent User Installations?

by NT-Gill In reply to Prevent User Installation ...

I'll research policies further. Thanks.

Collapse -

Prevent User Installations?

by 1eyed In reply to Prevent User Installation ...

You could use the System Policy editor in Administrative tools. What I do is "Create new policy", add group, choose group (e.g. Sales, Accounting, whatever), double-click icon, and under the "system" category check "Run only allowed Windows applications". Add your specific applications by clicking the "Show" button and typing in the file names (e.g. winword.exe or iexplore.exe). When done setting policy save file as "NTconfig.pol" and save it to: \WINNT\system32\Repl\Import\Scripts. This will effect all NT workstations logging in to the domain. If you have any 95 or 98 clients you can also do this using the Resource kits for the specific OS.

Hope this helps.

Collapse -

Prevent User Installations?

by NT-Gill In reply to Prevent User Installation ...

I've been wanting to delve into policies. I guess now is the time. Thanks for the help.

Back to Windows Forum
16 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums