Windows Forum
I want to stop software being installed on the NT4 clients. But the users (Helpdesk Engineers) need to install software. But only authorised software.
Is it possible to stop installs...BUT allow installs if they are taken from a specific folder.
re:Is it possible to stop installs...BUT allow installs if they are taken from a specific folder. answer:no, explination below.
The app should know that only admins may install a app but some app bypass the nt process and let a user install.
You can prevent users install software but not the admins.
In summary for all answers.
I have worked for 2 companies trying to prevent this.
What we did on the first one is to use the nt acls to give the users only access to certain folders, the other folders only the admin has full access to it. Since most app install in the \program files folder the user needs read access, the admins has full control. So therefor only the admins can install (we encountered some app that needed read/write to function properly).
So one way is to use permission on folders there for automatically if a user can not write to the folder he can not install a software.
The second (current) company is using Novell and Zenworks in addition to nt. With Zenwork you can select which app a user may run. They can not run any app that is not allowed.
(if you don't have this setup this will be a new investment).
Note:I have read about the policy editor in NT in wich you can create a policy for the users that can run only selected app, but I believe Zenworks if much more flexible.
Regarding the post itself: Stoping Downloads (NT). If this is referring to downloads from the internet.
You can use surfcontrol to block certain sites and ftp so the users can not download stuff.
regards,
Leopold
by mike.russell
Excellent thankyou, just confirmed my thoughts.
Back to the drawing board.
by mike.russell
This discussion is closed to new replies.
Sort by Trending