How can I lockdown corporate laptops so users cannot modify add / remove programs while off doamin

Posted on 2009-04-30
Last Modified: 2012-05-06
I have around 22 users with laptops, all of which have local admin right on the domain and then on (local computer). Some of these users require access to use a card reader to program memory cards. Is there a way around this to allow them access to modify a card reader as I know this normally requires admin rights.

It is getting old having "know it alls" try to update graphics drivers and what not then jsut deleting them and having it corrupt the system and IE and other software.

Can anyone help me with this or recommend a workaround?

Thank you
Question by:manelson05
    LVL 5

    Expert Comment

    This may help with hiding add/remove programs from them:

    They need to have admin rights to be able to access their card reader? I would think they could do that in another group, such as power users or something similar.
    LVL 7

    Accepted Solution

    You can do this with Group Policy on the local machine. This link will explain how better than I can...

    Author Comment

    lacrewqa, can I simply implement this locally on each laptop?
    Or will this owrk if I make a Ad container called laptops, then move the computer fromt he main computer container and apply the gpo?
    LVL 5

    Expert Comment

    It should work if you create the new container and apply the GPO to it.

    Author Closing Comment

    I am loving GPO the more I play with it, the users have no control any longer, this is SWEET!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    In a hurry?.. scroll down to "HERE's HOW TO DO IT" Section. Greetings All, I was going to post this as question/solution, but its seems more appropriate as an article considering its length.  I felt it important to illucidate all the details c…
    INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    6 Experts available now in Live!

    Get 1:1 Help Now