Stop Installiing Everything

  • Thread starter Thread starter James W. Long
  • Start date Start date
J

James W. Long

Dear All:

How can I prevent my W2K domain users from installing anything?

Right now they all run as administrator on thier own machines, as well.
I'm pretty sure I have to change that.

what else can I do, and can I do it as a policy and if so where?


I also need to enable only certain people to install stuff,
such as the administrator.


Thank you in advance,
James W. Long
 
Right now they all run as administrator on thier own machines, as well.
I'm pretty sure I have to change that.
Click to expand...



Start by removing them from the local admin group and only adding only
"certain people" to the administrator group.

what else can I do, and can I do it as a policy and if so where?
Click to expand...

Start by removing them from the local admin group. Test.

I also need to enable only certain people to install stuff,
such as the administrator.
Click to expand...


Add only the users that need to install apps to the admin group.

hth
DDS W 2k MVP MCSE
 
Create an OU for machines and users, Now. you need to remove all domain users
from the Admin group. Create a Security Group , say sUsersGroup and all the
Standards users to this group.

All machines must moved to the machine's OU
All users must be moved to the Users OU
Apply GPo on both OU's.

Don't edit the Default Domain Group Policy...Create the GPO from the OU
itself

Here, you can disable their access..MSI install or any legacy applications...

Good Luck..
 
Back
Top