Restrict a XP user

[balajee]

Hi

Can somebody let me know how do I restrict a user, with limited access type account, from installing any program on a XP machine.

Thanks,

 

[smah]

??? A limited user already can't install any programs. No further restriction is neccessary.

 

[princessofhearts30]

In your control panel under user accounts you can create an account and click limited users be sure not to give them administrative rights or else it isnt going to do ya any good.

 

[xtreemnet]

I do not know how but one of the users on my machine with limited access could install a software.

 

[bcastner]

If the software does not make entries into the system portion of the registry, and does not make entries into any system folder, the install will succeed.

 

[balajee]

I think I did not make myself clear. My machine is a stand alone one, but there are other people who have accounts(limited access). I read that XP machine in a domain environment can have a account of "Standard" type where the "Install/unistall" capability is not available. Is ther no way I can have similar facility in stand alone Windows XP?

 

[linney]

If someone in the family manages to install software on the computer, they might be using your password and logging on under your administrator account.

Here's a bit of information on Group Policy, a mountain of it is available via Google, and don't forget Help and Support. I have tried to arrange the links from basic to complex. Hope it helps you.

http://www.sans.org/rr/paper.php?id=313

http://www.theeldergeek.com/group_policy_for_windows_xp_prof.htm

http://www.microsoft.com/windowsxp/pro/techinfo/planning/security/whatsnew/propart3.asp

http://www.microsoft.com/windows2000/techinfo/planning/security/secconfsteps.asp

http://www.google.com/search?source...oe=UTF-8&q=Group+Policy+standalone+windows+xp

http://groups.google.com/groups?sou...oe=UTF-8&q=Group+Policy+standalone+windows+xp