Block program installs

[jfc1003]

Okay, this may seem very simple, but I seem to be missing it...All of my users have to be local admins due to several pieces of software we use. But, they are downloading and installing all sorts of webshots, screensaver programs, and other annoying spyware.

How do I block Domain Users with local admin rights from being able to install software without DOMAIN admin privileges?

 

[haveman]

You could try Active directory policies (GPO's) to establish this (lockdown the desktop, no access to DOS/add remove programs, screen settings, etc. etc.), but it has to be said that when a user is a local admin, he can do a lot of damage, without you doing much about it.....

If you really want to solve the problem, don't give them this kind of access.....

Regards, Ferdinand