Lock down Desktops

  • Thread starter Thread starter Sam Ramsey
  • Start date Start date
S

Sam Ramsey

What is the best way to lock down user desktop computers
so they dont download and/or install software. Currenlty
users are administrator of their local computer and are
installing software off the internet and they dont even
know it (spyware). All the desktops are in Windows 2000
domain if that helps.

Thanks.

-Sam
 
What is the best way to lock down user desktop computers
so they dont download and/or install software. Currenlty
users are administrator of their local computer and are
installing software off the internet and they dont even
know it (spyware). All the desktops are in Windows 2000
domain if that helps.

Thanks.

-Sam
Click to expand...

I have clients that have successfully used Deep Freeze on their network

--
/(bb|[^b]{2})/ that is the Question

ThePsyko
Public Enemy #7
http://prozac.iscool.net
 
You could try to populate the disallowed Windows Program list in Group Policy with
programs including install.exe and setup.exe but that will only stop the least
knowledgeable users as renaming files will bypass that policy. Realistically you can
not lock down a user that is administrator of their computer if they understand the
power of that account. You may have much better luck if you have XP Pro computers and
use Software Restriction Policies. A signed user policy with enforced consequences
may also be something to consider and you may want to rethink why they need to be
local administrators which usually is due to running software applications that may
have workarounds.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
 
What is the best way to lock down user desktop computers
so they dont download and/or install software. Currenlty
users are administrator of their local computer and are
installing software off the internet and they dont even
know it (spyware). All the desktops are in Windows 2000
domain if that helps.
Click to expand...

Remove local admin access to start. Or invest in products that block
spyware.

Jeff
 
Back
Top