We have various users on the network (Win2000 Servers and WinXPPro desktops) and I want to restrict a specific domain group (students) so they cannot install anything on the desktop no matter what their local policy status (restricted user or power user) except administrators.
There will be various users (faculty, staff, employees) on the desktops besides the “students” so I need to apply this only to that group.
I don’t want to have to specify the applications they can or cannot use…too lengthy and too many different computers labs with different software setups.
I just want something that states this particular group cannot install anything…period. Does this exist?
