Avatar of Habi Z
Habi Z
 asked on

looking for a tool

In my organization we have a locked down the users and just gave them power rights. We noticed that recently users are able to install applications. Do you know of any tool that can help us determine why is this happening.
The OS is Windows XP.
Thank you
Windows XPPCSecurity

Avatar of undefined
Last Comment
Habi Z

8/22/2022 - Mon
johnb6767

Any reason why you didn't use Limited Users? Power Users is NOT locked down.....
johnb6767

A member of the Power Users group may be able to gain administrator rights and permissions in Windows Server 2003, Windows 2000, or Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;825069

Excerpt....

By default, the rights and permissions that are granted to the Power Users group include those rights and permissions that are required to allow members of the Power Users group to modify computer-wide settings, to install drivers, and to run (or install) non-certified programs.
Habi Z

ASKER
We had this for while when a user is part of the power group he or she was not able to install any programs or msi files. They were not able to access the user account with out entering the administrator password. We only have windows servers.

I need to solve the issue.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Habi Z

ASKER
Also I need another Tool that will show what groups the user is part of. Do you think this has to do with the user priviledges or PC priveledges.

Thanks,
johnb6767

Limited users can login to the machine with no problems... Whats the error when you have a limited user logon?
ASKER CERTIFIED SOLUTION
johnb6767

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
rbadhwar

⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
mjpollard

Another point to consider is how you are locking them down. From experience, if you do not use the MS Installer service and modify no system files or keys in the HKLM branch, a standard user account can install software. Further, newer versions of Windows are virtualizing those spaces so it is even less of a hindrance.
Habi Z

ASKER
Good it gave me a way to look for the results.