Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2841
  • Last Modified:

setup windows 2003 group policy object editor to prevent users from installing programs on there pc.

Hi,
    My question is this, I am setting up a Windows 2003 server box and I have created an organization Unit and am setting a group policy for this unit so that the users i place in the OU group will be restricted from messing around on there xp workstation.  So I would like to prevent users from downloading and installing programs.  Does anyone know where in group policy editor it needs to be modified so that users can not download and install programs.

Thanks

Mike
0
snipa911
Asked:
snipa911
1 Solution
 
nitadminCommented:
The best thing you can do is not to give users Local Power Users or Administrator permissions.
Don't add the Domain User account to the local Power Users or Administrators group.

Here an article from Microsoft Technet Magazine.
http://www.microsoft.com/technet/technetmag/issues/2005/11/FieldNotes/?related=y

Cheers,
NITADMIN
0
 
BigBro007Commented:
Under the computer configuration for your group policy, you can change the quota limit to disallow people from saving files to the hard drive, which would include installation as well. If they were still standard users, they would still have rights to save files on the pc, so the gpo is needed...
0
 
cooleditCommented:
hi, there

If you bought a SBS premium edition there is the included ISA 2004 firewall.

http://www.microsoft.com/technet/isa/2004/plan/httpfiltering.mspx

Cooledit
0
 
jalilthe1Commented:
(((((((((((( ONE )))))))))))
Download the Microsoft Group Management Console. It will allow you to view all policies and policy results in a much better and more consistant format. Hopefully this will help.

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
---------------------------------------------------------------------------------------
((((((((((( TWO )))))))))))))))
What other options are you seeing that are different?  When you open the Group Policy Editor on a domain object the options should be the same.  There would be a slight difference with local policies and domain policies.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now