prevent application installations by power users

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello,

Our domain users are locally power users.
Is there any way to block these users from installing applications.
At GPO, told not to run regedit.exe
But still now luck.

Please help.
 
In
jinu said:
Hello,

Our domain users are locally power users.
Why?

Is there any way to block these users from installing applications.
Click to expand...

They will be able to install some applications. Local Power Users are nearly
Administrators.
At GPO, told not to run regedit.exe
Click to expand...

That wouldn't make any difference. You can do a lot of things via group
policy, but the best way to deal with this is to take away the permissions
so they're just Users. If you have software running on those PCs that won't
run right otherwise, see if you can change the permissions in the file
system & registry sufficiently so that ordinary users can write to those
areas as they need to. FileMon and RegMon may help you out here.

Regmon:
http://www.microsoft.com/technet/sysinternals/utilities/Regmon.mspx

Filemon:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx

OR Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx

Regardless of what rights you give them, you should probably put together a
written Acceptable Computer Use policy that everyone has to sign.
 
Back
Top