Prevent Non-admin user from installing software

I have a Windows Server 2003 AD environment with all XP Pro SP2 computers. No users other than admins have local power user or admin rights. They are only members of the users group. There are some pieces of software that users can download from the web that install without admin or power user priviledges. For example, a user was able to install Power Point Viewer with no admin rights. Is there a Group Policy to prevent installation of software that does not need admin rights to install? Software Restriction GPO produces too much administrative overhead for their part time IT person. I just need to know if this is possible without purchasing a third party application.

I have searched EE database and seem to only find solutions for people that gave their users local admin rights and just needed to remove them from those group.
LVL 1
StephenMcCollumAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
The only built in tool is a software restriction GPO which you seem to have already ruled out - It really isn't that bad - any 3rd party tool is also going to require some time spent on it.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
snowdog01Commented:
Some web-based installers user Active-X to run them.  You could, again through a GPO, restrict their ability to run Active-X applications.
0
StephenMcCollumAuthor Commented:
Not really what I was looking for...
0
StephenMcCollumAuthor Commented:
I realize what GPO's can do. Was looking for another solution.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.