How can I prevent s user from installing new software in my PC ?

[Johnthom]

Hi everybody,

I have a Win2K Professional computer, and I take admin right, my younger brother is only a user in my computer. I don't want him to install new softwares into this computer (such as games ...), I have managed to try all ways, but until now I cannot do it. Is there anyone knowing how to solve this problem, please tell me.

Thanks in advance for any help.

John Thom

 

[erans]

you can use the group policy.
open mmc and add the "Group policy" snap-in.
you will find under "user configuration" - "administrative template"
"control panel" the add remove program
Eran

 

[grodriguez]

that will only prevent him from installing software through the add/remove programs option in the control panel, it will not prevent the intallation of self extracting/installing programs. for example if he downloads acrobat reader from the internet the program will launch a self-install and he will succesfully install acrobat reader, the same with self extracting .zip files. you will have to create a local group policy and specify what that group can and cannot do, then add the user to that specific GPO.

 

[jjgraf]

Couple of things; insure the File system is NTFS which allows setting of privileges on the file system. Then go through the file system setting the permissions so Admins and System have full control and the domain users have read and execute authority only. Don’t forget to put him the printing group and Set his profile directory to READ WRITE and EXECUTE for him.

If the File system is FAT32 or FAT you can not use all the security features on W2K or NT. These file systems makes everybody pretty much an Admin. There is a convert to NTFS file system app that comes with W2K.

This will take some time to figure out what directories your brother will need privilege to

Also if you run 16bit and allot of win95 and win98 apps you can run into allot of problems when setting permissions. It won’t keep the machine from booting but those apps are not designed to work in a secured environment.