prohibit program installation

Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

Are users local administrators on computers? If not, there are very few
software packages that will actually install. Most of them require write
permission to registry and windows folder. Since users who are not local
administrators do not have this permission they won't be able to install.

The other option is Software Restriction Policy.

How To Use Software Restriction Policies in Windows Server 2003
http://support.microsoft.com/defau [...] -us;324036

I hope it helps,

--
Mike
Microsoft MVP - Windows Security

"hmlcc" <hmlcc@discussions.microsoft.com> wrote in message
news:3AEC6814-2122-43E2-AE38-79F60783E5AC@microsoft.com...
> Hi there,
> I would like to setup a windows 2000 server group policy so that when
> users
> login and are athenticated, they will not be able to install programs on
> their local computer. If programs are to be installed, they must be done
> by
> the administrator. What steps are required to set this configuration up?
>
> thanks in advance