Remove rights to install programs

Posted on 2009-05-06
Last Modified: 2012-05-06
I have a Windows 2003 and Windows XP environment. I would like to limit users' rights so they can't install programs, but don't want to make it an administrative nightmare. So as long as they can't install programs that would be the main thing I would want to limit. But I would also like to give the supervisor of that department a password or let his user have the rights to install the software. So I guess I want to get prompted for a password when an installation tries to take place and give certain users permission to do so. Thanks in advance.
Question by:buckethead34
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2

Expert Comment

ID: 24316975
This software : Install-Block : sounds like it does what you want to be done. Stops installing and prompts for a password. Looks like it has other features too. Unfortunately it's $20 to buy.

Expert Comment

ID: 24316977
I guess a link would be nice
LVL 50

Expert Comment

ID: 24316979
buckethead34--Windows Steady State will work for XP.  I do not know about 2003.
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 24317013
Is there a way to do this through a group policy does anyone know?

Accepted Solution

spamster earned 250 total points
ID: 24317131
There's two places in GPO - one under computer config, and one under user config
\administrative templates \windows components \windows installer

Expert Comment

ID: 24317166
I didn't see it noted in the question, are your users part of local admin group? If so, removing them should deny them the ability to install software. But I understand the occasional need of having users as local admins. :)

Author Comment

ID: 24317655
Yes my users are local admins, I don't want to cause myself extra work in regards to being able to map a drive, put in a shortcut, etc.

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Error login w2012 domain 6 104
Problems with Microsoft.DHCP.PowerShell.Admin Module 4 88
Domain Controller FSMO 7 72
User wants to log with Username or Email 4 81
Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In an interesting question ( here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question