Solved

stopping users installing new softwares

Posted on 2009-04-03
5
223 Views
Last Modified: 2012-05-06

Dear experts
I have a domain controller on win 2003
I want to stop users installing any new software bythemselves and use that only installed by the administrator
Is there a way to block them running the setup.exe and install.exe
Pls help its urgent
Regards
0
Comment
Question by:thabash
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
5 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 24062140
The only way your users would be able to install programs on your domain controller would be if they have administrative rights to that computer.  Your users should NEVER have administrative rights on any domain controller.  If you don't want your users to be able to install programs locally, they must NOT have local administrator permissions either. The easiest way to prevent them from installing local programs is to restrict their rights to the local computer by putting their domain user account into the local Users or Power Users group.
0
 
LVL 5

Author Comment

by:thabash
ID: 24063957

Thanks for help
Is there any step by step document to create a group policy to stop users doing
0
 
LVL 5

Author Comment

by:thabash
ID: 24064075

Thanks for help
Is there any step by step document to create a group policy to stop users doing
0
 
LVL 5

Author Comment

by:thabash
ID: 24064091

The installation
0
 
LVL 5

Author Closing Comment

by:thabash
ID: 31566346
i think i should read more

thanks
0

Featured Post

Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Come and listen to Percona CEO Peter Zaitsev discuss what’s new in Percona open source software, including Percona Server for MySQL (https://www.percona.com/software/mysql-database/percona-server) and MongoDB (https://www.percona.com/software/mongo-…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question