Hi, Is there an easy way to stop users installing applications on lab computers. I have a Novell 4.11 server and would like to limit users who use a lab of WinNT computers, so they can't install anything else but what's on the computers. I know of the "only allowed registerd programs" in the profiles, but I have two labs sharing one context and some users use both labs. What I realy want maybe is a way to split a logon script so when a user users one lab they get one policy and when using the other lab they get the second policy, but the users share one context. Thanks for any help, G

got zen? if you have zenworks for desktops you can create dynamic volatile users so that they can do whatever they want "pretty limited if you have it make "user" users they won't be able to install anything and when they logout, their nt profile that zenworks creates for them get's destroyed. I believe that this is on the zenworks starter pack if you are worried about the cash. you can then create your policies and assign them to groups, based on the computer and not the user. hope this helps scifi

G, SciFi is REALLY close about what needs to be done. The latest Novell NetWare client for Windows NT/2000 also comes with the ZENworks Starter Pack - a free version of ZENworks for Desktops 3 (minus the Inventory and Remote Control capabilities). You can create a Windows NT Workstation Package and a Windows NT User Package - in these packages are Policies (not Windows policies - ZENworks Policies) that will allow you to import your workstations into the NDS tree as NDS Workstation objects. They will also allow you to create Dynamic Local Users inside the Windows NT Security Account Manager. This is basically having ZENworks create a local Windows NT user account on the PC if one does not exist. This policy allows you to set which level of NT security they have - Administrator, Power User, Guest, etc. Administrator and Power Users can install applications, Guests cannot. Simply create the Policy packages (there is a wizard that will step you thru this once ZEN is installed) and register and import the workstations into the tree (preferrably into the same context as the users - or below) and create a package with the Dynamic Local User policy - give it the access rights you want and associate it to these users. Create another policy package with Dynamic Local User with Administrator rights and associate that package with your user account. This will allow YOU to get into ANY NT box with Admin rights but lock out everyone else to Guest rights.

I will try these suggestions ASAP, and let you know how things go. Thanks for all the help, G.

We use Deep Freeze and it is really good for our high school computers. User can install what ever they want but when they reboot everything gets erased. http://www.deepfreezeusa.com/