I have a Windows Server 2003 AD environment with all XP Pro SP2 computers. No users other than admins have local power user or admin rights. They are only members of the users group. There are some pieces of software that users can download from the web that install without admin or power user priviledges. For example, a user was able to install Power Point Viewer with no admin rights. Is there a Group Policy to prevent installation of software that does not need admin rights to install? Software Restriction GPO produces too much administrative overhead for their part time IT person. I just need to know if this is possible without purchasing a third party application.
I have searched EE database and seem to only find solutions for people that gave their users local admin rights and just needed to remove them from those group.