How can i restrict software installation on an limited account only (windows xp pro)?

hi,

I have created a limited account and admin account on windows xp pro.

and i have create some restriction using group policy (gpedit.msc), but when i do the restriction, administrator account also cannot have permission to access.  

it's same with limited account.

can somebody tell me that how should i do for it?


Thanks..
4nyth1n6Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

leegclystvaleCommented:
Ensure the limited account is only in the user group. (not power user, admin etc.). A User cannot install software. Admins can. If you restrict from the Gpedit side, it will aplly to all users depending on what you're restricting
0
4nyth1n6Author Commented:
ok, now how can i know that the limited account is in the user group? how should make admin have full access and limited account have specific access only through group policy?
0
4nyth1n6Author Commented:
for simple, i just want to make the limited account cannot install and run some specific software
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

leegclystvaleCommented:
right click My computer>manage>expand local users and groups>users>double-click your user>select member of tab
this will show you what groups your user is in.
for specific software, take a screenshot of the settings you're changing in gpedit and post it here
0
4nyth1n6Author Commented:
what should i put in for the member of?


because inside the member of has stated as USER.


For example: i restrict the regedit access through group policy. but my admin account also cannot allow access to regedit. i just want to block it on limited account, for admin account still can access.

actually, how should i do for it?
0
two_people_hkCommented:
All the accounts that you created in Windows Xp should be in users group.
And users group will have limited access to the local computer.
On the other hand, administrators group already had full operation on the local computer.
What you need to do is assign the users into those groups, after that give the permission to users group to special folders, files or programs. By default users in users group are not able to install programs.
Any questions, please leave messages.
0
4nyth1n6Author Commented:
but now, what can i make my admin account can have full access,

because my problem is when i do restriction for regedit access, my admin account also cannot access to regedit. i just want to make the restriction for regedit in limited account only.

Can you teach me how can i do it?
0
two_people_hkCommented:
You should not do restriction on admin groups.
And please check the users in admins group are not existed in users groups.
0
4nyth1n6Author Commented:
Where can i go to check the users in admins group are not existed in users groups?

how can i do?

I don't understand about it.
0
Shanmuga SundaramDirector of Software EngineeringCommented:
0
two_people_hkCommented:
right click "My Computer" -> "Manage"
Under "local users and groups"
Check the "Goups"
there should be "administrators" group and "Users" group.
0
4nyth1n6Author Commented:
yap, there are admin group and users group, and now what should i do?
0
4nyth1n6Author Commented:
i do the restriction for regedit using gpedit.msc, but admin still cannot access to the regedit, that stated disable by administrator, why?
0
4nyth1n6Author Commented:
for example: if i disable run through gpedit.msc, admin also cannot access to run, same level with limited account.

how should i do?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
two_people_hkCommented:
If your policy is setting correctly. admin account should be able to access regedit.
On the other hand, regedit not able to access also may affected by virus.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.