Restricting users to installing unnessary softwares

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi all,

We have windows 2000 DC. Being it's a development company our developers
works on vs.net 2003 we forcefully added all accounts to Domain Amins Group
to work vs.net.

Now the problem is with the full access they are installing unnessary
softwares in the systems. How to restrict this people to install unnessary
software being member of Domain Admins group. I have created a OU and
searching for a solution.

Any body have suggestion please post.

Thanks in advance.
Shiva.
 
If they are domain admins they can install software.

This is a very bad setup. They as domain admins can screw up your domain.

I would suggest you remove them from the domain admin group and add their
domain account to the admin group on their local computer. At least this way
they are limited to being an administrator only on their computer. They can
screw up their computer but not you domain.

Then I would investigate if there was a newer version of the software that
does not require them to be administrator to work.


hth
DDS W 2k MVP MCSE
 
Hi Sanders,

Thanks for your reply.

How the other vs.net development companies are working. If the users are not
the members of administrator group iis and vs.net won't work. can we do
normal user can run iis and vs.net in iis7 and vs.net 2005.

Regards,
Shiva
 
Is it not possible to restrict users to install unnessary softwares thorugh
group policies being in the member of domain admin gorup.
 
Is it not possible to restrict users to install unnessary softwares
thorugh
group policies being in the member of domain admin gorup.
Click to expand...

Whatever you do to lock them down, they as domain admin can undo.

They don't need to be domain admins, at most they need to be admins of their
local computer only.

There is software out there that you can run to see what files a program is
accessing. Then you can set the proper permissions on the files the user
needs access to. This way you can have them as "users" but you relax the
permissions on the files they need so they don't have to be administrators
to use them.

hth
DDS W 2k MVP MCSE
 
Back
Top