WinXPTalk.com

Mike · Guest

We have to allows the users of our systems to be Administrators in order for
our programs to work properly. With this being the case, is there a way or
is there a program or utility that will keep programs from being installed
even though the users had Administrative priveledges?

Thanks

Steven L Umbach · Guest

That is a tall order but you can use Software Restriction Policies and
configure enforcement to include local administrators. I suggest that you
configure it under computer configuration. Beware that any local
administrator however can boot into safe mode to bypass SRP and of course a
local administrator can also unjoin the computer from the domain. The link
below explains more and realize the shortcuts by default are included in the
list of extensions that can be blocked. Make use of the application log on
the computer if you are having trouble tweaking the SRP settings as an event
will be recorded when an application is blocked by SRP - at least in
P2. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

"Mike" <Mike@discussions.microsoft.com> wrote in message
news:B80EC2F3-BD07-4088-81FC-E25548CA52BD@microsoft.com...

	WinXPTalk.com Forum Index -> Security	All times are GMT
Page 1 of 1