Windows Forum

Ask something
Discussion Locked

locking down desktop

0 helpful
7 replies

by mikelazz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a user in a remote office that is prone to installing unauthorized software on his machine. What is the best way to prevent him or anyone from installing any program on his machine? The machine in question in running Windows 2000 Pro Sp4 and is not part of the Domain. It is a stand alone machine that connects to the main office via a terminal server connection I am aware of the ability to create security policies on XP machines. Thank you.

7 replies

by cptomlly

If this user logs on locally to the machine, then remove his ID from the local administrators group, and add him to the users group.

by voldar

The simplest way to cut his fingers is to create a user on the local machine and give him simple user rights, nothing else. He'll never be able to install anything else, I assure you.
As for the domain, the same thing, give all users of the domain the simple user rights!!

by dmiles

You might be able to do this by putting a policy on the machines however as
Windows XP is the most secure system these kinds of policys are
notoriously easy for a well versed computer user to get around

This discussion is closed to new replies.