group policy

Posted on 2007-10-19
Last Modified: 2010-04-20
how do I configure group policy in server 2003 so that I can specify what software can and can not be installed on XP pro PC's on the LAN. server 2003 as domain controller.
Question by:jeffsteffy
    LVL 8

    Accepted Solution

    LVL 30

    Expert Comment

    You can also control this by limiting membership in the local Administrators and Power Users groups on each workstation, as normal Users are restricted from installing most (though not all) software packages.
    LVL 2

    Author Comment

    I only want most people to install only company approved software, if not company approved they will not be able to install software.
    LVL 30

    Assisted Solution

    Then you will need to create a Software Restriction Policy using the links provided above, and add the necessary installers and executables for any software that you have defined as "company-approved".
    LVL 2

    Author Comment

    Where do i add the necessary installers and executables?  Can I restrict certain PC's from installing and leave some PC's so they can still install any software? looks like i would create an OU to restrict then create an "engineering" OU that i dont want to restrict. I'll spend time reading the articles then start the fun.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now