Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Group Policy to prevent users insta
Name: maximusimo Date: October 18, 2004 at 04:32:34 Pacific OS: Windows 2000 CPU/Ram: 1.25GB RAM
Comment:
Hi,
we are running Windows 2000 SBS. I am looking to create a Group Policy to prevent users in an OU from being able to install software, any ideas how I should do this? Thanks in advance
Name: Curt R Date: October 18, 2004 at 05:35:28 Pacific
Reply:
Yes, at the OU level create a GPO and restrict the users ability to install software. Since this only applies to users, you can stop it GPO from applying to computers to speed the login process up.
0
Response Number 2
Name: maximusimo Date: October 18, 2004 at 05:56:34 Pacific
Reply:
Yes but how do I do this?
0
Response Number 3
Name: Lucid Date: October 18, 2004 at 14:41:30 Pacific
Reply:
I forget exactly in which sections, but there are items like "Prevent installation from Removable source" and "Hide Add/Remove Programs applet" and other items. I think they're all in the Control Panel sections.
If you can, limit them to being a standard user instead of a Power User or Administrtaor on the workstation. That should prevent them from installing a lot of stuff...
0
Response Number 4
Name: maximusimo Date: October 19, 2004 at 06:10:35 Pacific
Reply:
Thanks,
I shall look at those sections mentioned - the worst of it is is that some users need admin privileges for some software to run
Summary: I am trying to use Group Policy to install Win XP SP1 on all machines connecting to my W2K Server. Downloaded SP1 Network Installation from MS site and unzipped it. Created a new Organizational Unit o...
Summary: How can I add a local policy in windows 200 pro to prevent users from changing the wallpaper and display seetings. I could not find that option.? Thanks ...
Summary: It sort of makes sense. Do you have a domain? If so, you could create OUs within your AD structure and apply the policy to an OU. Or you could create a group policy and then set the permissions to "...
0 
file sharing on different...
