Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Preventing network users from adding/installing or removing programs

Posted on 2005-03-02
Medium Priority
Last Modified: 2010-04-14
In a Windows 2000 Domain, what is the best way of creating a policy to inhibit software being added or removed?

There are six Windows XP workstations on the LAN.

We are having a big cleanout of messengering messaging tools like MSN and Yahoo messenger, and are keen that users do not quietly reinstall these apps.

What about Windows messenger? Is there a policy possible to prevent this built-in program from being enabled?
Question by:mbhh
LVL 97

Accepted Solution

Lee W, MVP earned 1000 total points
ID: 13445839
If your users aren't admins on the machine, then they shouldn't have the ability to install software.

Expert Comment

ID: 13445988
If you delve into Software Restriction Policies with Windows XP clients, you'll really get fine control over which applications can and cannot run.

For more info about software restriction policies, see:
LVL 18

Expert Comment

ID: 13448852
The best way to to inhibit software being added or removed is to ensure that your users are NOT local admins on their machines. As leew said, if the user is not an admin....then they won't be able to install software or access any criticial system files or the regiestry. You can enforce software restriction policies, but if your users have local admin rights then they could get around those restrictions and still install/remove software because those policies are not fool proof.
[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

LVL 25

Expert Comment

ID: 13450638
leew is right about the local admin,, but if you want to remove messenger here is how:


Author Comment

ID: 13488518
Apologies for my lack of input - flat out - give me another week please to try some of these ideas . .   cheers Mark

Author Comment

ID: 13643074
Many thanks - yes I had not noticed until now that a couple of users were members of Domain/Admins as well as Domain/Users.

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Use this step by step method when setting up QuickBooks Online. They will allow you to explore the various features of the advanced settings available to you.
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Enter Foreign and Special Characters Enter characters you can't find on a keyboard using its ASCII code ... and learn how to make a handy reference for yourself using Excel ~ Use these codes in any Windows application! ... whether it is a Micr…

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question