Hello Raymond,
By default Power Users can install software, you may be able to get around
some of this by modifying permissions but you may also restrit them from
doing other operations as well. You will need to test and you will most
likely find a level of "lock down" that suits your needs. There may be a bit
of give and take in this.
A non-power user is not going
to be allowed to write to the Program Files directory; that user will
not be
allowed to write to HKEY_LOCAL_MACHINE. During Setup, if the installer
package
tries to open HKEY_LOCAL_MACHINE, and Setup is not being run by a user
with
write permissions to HKEY_LOCAL_MACHINE (power users, and
administrators), the
user receives the following message:
Here is some information on this topic
278874 Power Users Cannot Install Programs in Windows 2000 Professional
http://support.microsoft.com/?id=278874
Power Users are between Administrators and Users in terms of
system access. The default Windows 2000 security settings for Power
Users are
backward-compatible with the default security settings for Users in the
Windows
NT 4.0 operating system. In short, Power Users are indeed powerful.
Ideally, Power Users should be able to perform any task except for the
administrative tasks described above. Thus, Power Users should be able
to
perform per-machine installs and uninstalls of applications which do not
install system services.
In practice, Power Users cannot install many
legacy applications because these applications attempt to replace
operating
system files during the Setup process.
326473 You Are Prompted for Administrator Credentials When You Try to
Install a
http://support.microsoft.com/?id=326473
Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support
Get Secure! -
www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
