How to Prevent domain users from installing softwares?

[suseli]

I have a domain with:
1 Win 2003 Server
120 Win XP Pro Clients

There are about 150 domain users. I went thru several machines and found that some comptuers has softwares like msn/yahoo messengers, usb drive's softwares are installed.

How come these domain users has installed the softwares? And how can i prevent it?

 

[Roadki11]

If i had to guess, i would say your domain users some of them or all of them are members of the local admin group on the pcs. Thats where i would look first.

RoadKi11

 

[suseli]

I went thru those PCs where the software were installed and checked the local accounts/groups. None of those users were in local admin grp.

 

[Roadki11]

Check local power user group and domain admin group.

RoadKi11

 

[dberg35]

Make sure they do not have the local admin password for that pc. That happened to me with one client and user, needless to say I had to change it.