SBS 2003 Prevent Users Install programs and ActiveX

Server SBS 2003
Clients XP SP2

I want to make an Active Directory Policy to prevent users can install prorgams or plug-ins, acitivX....
I need a step-by-step answer.
I don't know if it is necessary in each client computer go to Control Panel Users and set properties Restricted User or if I  make the Active Direcory Policy this is no matter what is set there.

I want to make this for security prpouses and make necessary to start the login with an administrative Account to install any software. I'm I in the right way?

Thanks a lot
cpx_SupportAsked:
Who is Participating?
 
Fatal_ExceptionConnect With a Mentor Commented:
Are you new to Group Policy?  If so, remember that entire books are written on this subject, so I recommend you watch these 2 videos first:

http://www.microsoft.com/technet/community/events/windows2003srv/tnt1-119.mspx
0
 
Fatal_ExceptionCommented:
Good idea, Keith...  :)
0
 
Jeffrey Kane - TechSoEasyConnect With a Mentor Principal ConsultantCommented:
You'll find a decent step-by-step for Software Restriction Policies here:  http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

Jeff
TechSoEasy
0
 
Fatal_ExceptionCommented:
Thanks C101 and Happy Holidays!

FE
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.