Solved

setup windows 2003 group policy object editor to prevent users from installing programs on there pc.

Posted on 2006-11-07
4
2,832 Views
Last Modified: 2008-01-23
Hi,
    My question is this, I am setting up a Windows 2003 server box and I have created an organization Unit and am setting a group policy for this unit so that the users i place in the OU group will be restricted from messing around on there xp workstation.  So I would like to prevent users from downloading and installing programs.  Does anyone know where in group policy editor it needs to be modified so that users can not download and install programs.

Thanks

Mike
0
Comment
Question by:snipa911
4 Comments
 
LVL 8

Accepted Solution

by:
nitadmin earned 500 total points
ID: 17895499
The best thing you can do is not to give users Local Power Users or Administrator permissions.
Don't add the Domain User account to the local Power Users or Administrators group.

Here an article from Microsoft Technet Magazine.
http://www.microsoft.com/technet/technetmag/issues/2005/11/FieldNotes/?related=y

Cheers,
NITADMIN
0
 

Expert Comment

by:BigBro007
ID: 17895860
Under the computer configuration for your group policy, you can change the quota limit to disallow people from saving files to the hard drive, which would include installation as well. If they were still standard users, they would still have rights to save files on the pc, so the gpo is needed...
0
 
LVL 9

Expert Comment

by:cooledit
ID: 17896362
hi, there

If you bought a SBS premium edition there is the included ISA 2004 firewall.

http://www.microsoft.com/technet/isa/2004/plan/httpfiltering.mspx

Cooledit
0
 
LVL 7

Expert Comment

by:jalilthe1
ID: 17897131
(((((((((((( ONE )))))))))))
Download the Microsoft Group Management Console. It will allow you to view all policies and policy results in a much better and more consistant format. Hopefully this will help.

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
---------------------------------------------------------------------------------------
((((((((((( TWO )))))))))))))))
What other options are you seeing that are different?  When you open the Group Policy Editor on a domain object the options should be the same.  There would be a slight difference with local policies and domain policies.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Router assigned IP addresses 18 88
Wired Network vs Wireless 12 56
Claiming a Domain Name 7 31
How to simulate latency? 5 23
Let’s list some of the technologies that enable smooth teleworking. 
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question