General discussion

Locked

Restricted Installations Overridden

By pcmaster ·
I have installed several Win2K Pro workstations and on all of them I restrict the user to not allow software installations. I do this by setting up the user as a 'User' and nothing else.

I also set the Local Security Policy, under 'User Rights Assignment' to NOT allow the user to Load or Unload Drivers. However, a user installed Netscape 7.1 under his profile. Netscape, during the installation process popped up a window that said, "You must be an Administrator to install this application. Would you like to proceed anyway?" And the user selects 'Yes' which it then completes the installation.

My question is, How can I absolutely prevent a user from installing software with this kind of alternative to the Administrative order set?
Thanks.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Restricted Installations Overridden

by CG IT In reply to Restricted Installations ...

your question requires some additional info. First, are users loggin into a workgroup or a domain. The second question kinda depends on the answer to the first. when you say local security policy, is that a specific computer's local policy?

What O/S? NT? W2K? W2003 Server? Active Directory installed? Group policy applied?

Normally, the domain users group in a W2K AD environment can NOT install any programs even with GP not configured. The default GP for the domain users account doesn't allow it. Users will get a message notifing them that they do not have appropriate permission and to contact the administrator.

Collapse -

Restricted Installations Overridden

by CG IT In reply to Restricted Installations ...

note when I asked what O/S I mean what Server O/S that services users? not the local workstation O/S.

Collapse -

Restricted Installations Overridden

by pcmaster In reply to Restricted Installations ...

This is a Win2K client on a domain connected to an NT 4.0 server. No AD environment. The settings I spoke of was Local Policies.

It was very odd, but Netscape 7.1 does an install from the internet. First downloads, then starts install, gives the admin privilege warning, then installs it anyway. I did manage to tweak some other Local security settings so that even though the software installs and is there on the machine, the program won't run. Hopefully this will prevent them from setting it up again.....they aren't going to tell me it doesn't work since they weren't supposed to install it in the first place. :) But it would be nice to prevent the installation, saving precious hard drive space.

Thanks

Collapse -

by pcmaster In reply to Restricted Installations ...

This question was closed by the author

Back to Windows Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums