Stop software installs

[doctor2001]

Hi -

I am looking for a solution that will stop users from installing software on an XP system but also be flexable enough to allow anti-virus updates, service pack updates and local printer configurations. I have looked into setting up policies but these days it is real easy to get a boot disk that will change the admin password and then I am back at square one.

Any suggestions? -

Thanks

 

[Turkbear]

If you have users that can access the PC and use a boot disk,I believe no method will be safe..

Try to physically prevent that from happening. ( maybe disable all but the hard drives in the Hardware profile..)

 

[mrmoneymatters]

I would do as turkbear said, disable the cd rom as a boot device in the bios. You could do the same with the floppy. Then password protect the bios.

To configure local printers and and service packs you will need more than user rights. The anti virus I use is sent to all clients from the server, users don't require any special rights for that.