Stop installation of applications

One way would be to remove My Computer, Windows Explorer, and remove run from the start menu using the policy editor.

Okay - specifically, check the boxes for Remove Run, Remove folders, Remove Find, Hide Drives, and Hide Network. These settings are under local user - shell - restrictions. That should eliminate the ability to click on a file and do an installation.

Use policy editor to restrict access to all programs and exclude the ones you whould want them to be able to run.
You do that under user>windows 98 system>restrictions>only run allowed windows applications, click show and add all the applications they will be allowed to use.

All good answers--until you get overridden by an irritated manager who wants to save something to a floppy or find a file on their PC. Then you have to start managing by exception to your policy. A real pain.

Sometimes the answer is not so much a technical solution as a personnel problem.

1) Create a written policy about acceptable use of computer equipment, including issues of licensing, purchasing, installation, and proper use.
2) Gain management approval for the policy.
3) Work with HR to ensure that all users understand the serious consequences of violating the policy.
4) Find an audit application to check policy compliance.
5) Work with HR whenever you find a policy violation -- if you don't have management support, youwon't be able to do it.

Thank you all for the great help. Everyone was correct. I now have to decide which way to go.

Thanks again!

This question was closed by the author