Controlling Users via Active Directory 1

[Arnold4]

hi

i am new to windows 2000 server as my experience is with UNIX/Linux servers.

I have a few users who don't listen and download/install things all the time and end up messing up their systems. Can i use the Active Directory to configure their accounts to not allow them to install or update any software. If so how do i do this.

Thanks in advance for your help

 

[porkchopexpress]

This is quite a large subject and if your users are local admins you will need to test that their software still works correctly as a restricted user.

Make sure that no users are members of the local admins or power users groups this will prevent users installing any software or altering system settings.

You can use 'Restricted Groups' to remove users and groups from the local admins and power users groups.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[warthog72]

Are there settings in Group Policy Objects that can also restrict that type of access?