Announcement

Collapse
No announcement yet.

How to stop users installing any s/w even if user is in local admin and power user gr

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to stop users installing any s/w even if user is in local admin and power user gr

    Dear Friends,

    I do not want to give privilege to AD users to install any software through their login ID. So for this did the following things in existing GP,

    Disable Windows Installer - Enabled
    Prohibit User Install - Enabled (Prohibit User Install)

    After applying this policy, it is working fine. But the problem is I have some users who have been added to the local administrator group and Power Users . This policy does not apply to them.

    Please revert back asap.

    Thanks & Regards
    Ali
    ISLAM IS PEACE.

  • #2
    Re: How to stop users installing any s/w even if user is in local admin and power use

    cant you remove the users from the local administrator and Power Users group?
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: How to stop users installing any s/w even if user is in local admin and power use

      Is the GPO applied on their accounts too? Did you use Security Filtering in the GPO?
      Last edited by sorinso; 30th May 2007, 07:10. Reason: typo

      Sorin Solomon


      In order to succeed, your desire for success should be greater than your fear of failure.
      -

      Comment


      • #4
        Re: How to stop users installing any s/w even if user is in local admin and power use

        Dear Friends,

        The ID has to be included in Power User Group and Local Admin.
        The GPO is applied on their account too. No security filetring is used.

        Thanks and Regards
        Ali
        ISLAM IS PEACE.

        Comment

        Working...
        X