Installations

  • Thread starter Thread starter Brian Arc
  • Start date Start date
B

Brian Arc

What is the best way to restrict all methods of
installations, and only allow them to be performed by an
administrator??? Group Policy enabled on Win2kServer and
Win2kWorkstations


Thanks

Brian A
 
On each workstation, I would remove the users' accounts
from the administrators group and specify their
permissions. This is easily done by right clicking on my
computer and choosing "manage" from the drop down menu.
You will probably have to be logged in as the
administrator whoose profile was establish during the
initial installation of the OS.
 
Hello,

1) The best way is to lock down the file system by modify the ACL.
Computer Configuration\Windows Settings\Security Settings\File System


2) There is a few policy settings you can take use of.

USER NODE:
Administrative Templates\Windows Components\Windows Installer\Prevent
removable media source for any install

Administrative Templates\Control Panel\Add or Remove Programs\Remove Add or
Remove Programs

Administrative Templates\Control Panel\Add or Remove Programs\Hide Change or
Remove Programs page

Administrative Templates\Control Panel\Add or Remove Programs\Hide Add New
Programs page

Administrative Templates\Control Panel\Add or Remove Programs\Hide the Add
programs from Microsoft option

Administrative Templates\Control Panel\Add or Remove Programs\Hide the Add
programs from your network option


COMPUTER NODE:
Administrative Templates\Windows Components\Windows Installer\Prohibit User
Installs




--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
 
Back
Top