Prevent Power User from installing software

  • Thread starter Thread starter Philip
  • Start date Start date
P

Philip

I have a stand-alone computer loaded with Win2k SP4 that
has to run AutoCAD 2004. I want to restrict users from
installing or using any other programs other than the ones
currently installed on the computer. However, I can't just
create the user accounts in the user group (which would
prevent installations) because AutoCAD requires that the
user be at least a power user because when it starts up,
it edits the registry.

Is there any way to do this in Win2k? We used to do the
equivalent in Win98 by using a program called WinLock.
 
Hello Philip.

Please see the following information in the link below:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windows2000serv/maintain/security/secdefs.asp

"Since there is no way to disable the built-in permissions allotted to Power
Users, administrators who need to support non-certified legacy applications
must loosen up the permissions allotted to members of the Users group to the
point where their installed base of applications can be successfully run.
The Windows 2000 operating system includes a security template for precisely
this purpose. The template is named compatws.inf and can be found in the
%windir%\security\templates directory. The template can be applied to a
system using the Security Configuration Toolset. For example, the
secedit.exe command line component of the Toolset can apply the template as
follows:
secedit /configure /cfg compatws.inf /db compatws.sdb
This template loosens up security for Users in a matter consistent with the
requirements of most legacy applications."

David Fisher
Enterprise Platform Support
 
Back
Top