In my organization we have a locked down the users and just gave them power rights. We noticed that recently users are able to install applications. Do you know of any tool that can help us determine why is this happening.
The OS is Windows XP.
Thank you
Windows XPPCSecurity
Last Comment
Habi Z
8/22/2022 - Mon
johnb6767
Any reason why you didn't use Limited Users? Power Users is NOT locked down.....
By default, the rights and permissions that are granted to the Power Users group include those rights and permissions that are required to allow members of the Power Users group to modify computer-wide settings, to install drivers, and to run (or install) non-certified programs.
Habi Z
ASKER
We had this for while when a user is part of the power group he or she was not able to install any programs or msi files. They were not able to access the user account with out entering the administrator password. We only have windows servers.
Another point to consider is how you are locking them down. From experience, if you do not use the MS Installer service and modify no system files or keys in the HKLM branch, a standard user account can install software. Further, newer versions of Windows are virtualizing those spaces so it is even less of a hindrance.