| Author |
Message |
Crystal
Guest
|
 Posted:
Fri Oct 21, 2005 8:27 am Post subject:
How to deprive Power Users of the rights to install any soft |
|
|
We are in a Workgroup environment and using XP SP2. I have to give my users
Power Users rights otherwise some software like Citrix client cannot run.
However, with Power Users right they can still install some small software
(not big one) like google I.E. tool bar, chat software, and etc. I wonder if
anyone can tell me how to deprive Power Users of the rights to install any
software? Thanks. |
|
| Back to top |
|
 |
Steven L Umbach
Guest
|
| Posted:
Sat Oct 22, 2005 4:26 pm Post subject:
Re: How to deprive Power Users of the rights to install any |
|
|
You should be able to configure the software to run as a regular user by
modifying the ntfs permissions and possibly registry permissions to be what
a power user has for that application by starting with the folder where the
application is [probably under program folders] and also checking the all
users profile for the application data folder and a subfolder used by the
application for the application. There is also a security template called
compatws.inf that can be imported via Local Security Policy though it would
give the users excessive permissions in my opinion. Beyond that you can
implement Software Restriction Policies in XP Pro to very effectively
restrict a user with the proper hash or path rules. Just keep in mind that
..lnk shortcuts such as the desktop are considered restricted by SRP. For any
XP SP2 computers the Shared Computer Toolkit free from MS is something to
look at and it does enable a version of SRP for XP Home which is really
great. The links below may help. --- Steve
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/windows/xp/all/reskit/en-us/prdd_sec_umgs.asp
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- SRP
http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx -- Shared
computer toolkit.
"Crystal" <Crystal@discussions.microsoft.com> wrote in message
news:77A5F3CB-5DD0-4D0B-BD95-58DA51D1B628@microsoft.com...
| Quote: | We are in a Workgroup environment and using XP SP2. I have to give my
users
Power Users rights otherwise some software like Citrix client cannot run.
However, with Power Users right they can still install some small software
(not big one) like google I.E. tool bar, chat software, and etc. I wonder
if
anyone can tell me how to deprive Power Users of the rights to install any
software? Thanks. |
|
|
| Back to top |
|
|
Crystal
Guest
|
| Posted:
Mon Oct 31, 2005 7:53 am Post subject:
Re: How to deprive Power Users of the rights to install any |
|
|
These information are very educational and helpful. I've finally sorted out
my problem!
"Steven L Umbach" wrote:
| Quote: | You should be able to configure the software to run as a regular user by
modifying the ntfs permissions and possibly registry permissions to be what
a power user has for that application by starting with the folder where the
application is [probably under program folders] and also checking the all
users profile for the application data folder and a subfolder used by the
application for the application. There is also a security template called
compatws.inf that can be imported via Local Security Policy though it would
give the users excessive permissions in my opinion. Beyond that you can
implement Software Restriction Policies in XP Pro to very effectively
restrict a user with the proper hash or path rules. Just keep in mind that
..lnk shortcuts such as the desktop are considered restricted by SRP. For any
XP SP2 computers the Shared Computer Toolkit free from MS is something to
look at and it does enable a version of SRP for XP Home which is really
great. The links below may help. --- Steve
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/windows/xp/all/reskit/en-us/prdd_sec_umgs.asp
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- SRP
http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx -- Shared
computer toolkit.
"Crystal" <Crystal@discussions.microsoft.com> wrote in message
news:77A5F3CB-5DD0-4D0B-BD95-58DA51D1B628@microsoft.com...
We are in a Workgroup environment and using XP SP2. I have to give my
users
Power Users rights otherwise some software like Citrix client cannot run.
However, with Power Users right they can still install some small software
(not big one) like google I.E. tool bar, chat software, and etc. I wonder
if
anyone can tell me how to deprive Power Users of the rights to install any
software? Thanks.
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in