asked on

How do I keep users in win2000 from installing programs ....

We have 40 workstations here running win2000 SP2. Win2000 server. We run several programs from the servers and other programs that need to access CD's on the server.

We need to be able to install new or updated programs on the workstations but we dont want users to be able to install anything AT ALL. Whether its from CD, a downloaded file, an install program from one of the servers, etc. No games, screensavers, instant messengers, etc. NOTHING without permission.

The only way we have been able to get all the programs to install and to work after installed is to give the users Admin rights and leave it that way. If I take away the admin rights after the programs are installed a few of them dont want to work.

we are pretty new to win2000 so help on this would be greatly appreciated.

Thanks,
Rodney

cfarca

Create a new police or modify the default one, and restrict program installation to the users which are not part of the "Domain Admin" or "Administrators" groups.
Hope this will help, Chris.

ASKER CERTIFIED SOLUTION

tituba2

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

rodney777

ASKER

Thanks,
That seems to have taken care of my problem.

I DID change the rights on the .INI files that corresponded with the programs I was having trouble with.

I DIDN'T do anything with the registry. Once I made the changes to the .INI files they all worked fine so there didnt seem to be any need to edit the registry but if I start having problems I will do that also.

Thanks again,
Rodney