I have a Win2k3 domain. Most of the client are XP. I have some policies for the password set. All clients cannot install programs without admin rights. But interestingly, I found that they are able to download and install MSN messenger, yahoo messenger. I am not worried about the IMs, but wondered if it should be possible.
I have given the users right to download print drivers as there is a print server in the domain the users need to connect to.
But even though I gave them this permission, they were still not able to connect to printer. I had to make the domain users members of the local power users group. Is this why they are able to install the IMs. So my Q is 2-fold,
- deny users rights to install anything
- allow them to search and connect to domain printers
Please advice.
Thanks.
I have given the users right to download print drivers as there is a print server in the domain the users need to connect to.
But even though I gave them this permission, they were still not able to connect to printer. I had to make the domain users members of the local power users group. Is this why they are able to install the IMs. So my Q is 2-fold,
- deny users rights to install anything
- allow them to search and connect to domain printers
Please advice.
Thanks.
