Prevent instalation

[xenotime]

can i use registry to control prevent users from installing any software on their computer? this is to ensure that the computer dept is informed of any new installations required by the users.

[Simon Clausen]

A possible way would be to use <a target="_blank" href=http://www.winguides.com/registry/display.php/969/>this tweak</a> and stop users from running the common setup programs (e.g. setup.exe and install.exe).

Regards,

Simon Clausen
---
WinGuides.com - Windows Guide Network
<a target="_blank" href=http://www.winguides.com/>http://www.winguides.com/</a>

[cybrside]

I was using that method, but my users started to rename the file from setup.exe to whatever.exe and launch it that way... just to let you know.

[xenotime]

that was sly. in that case, can we use registry to halt the process of installation (e.g. halt process if it attempts to install a new program)?

[POBrien]

try testing with this one

http://www.winguides.com/registry/display.php/113/

include all necessary files in the key that users need to run.

example

winword.exe
iexplore.exe

etc..

run it down in the users login script.

[reghakr]

xenotime,

There are many ways for installing software.

Go to start&gt;Run, and type:
notepad c:\windows\control.ini. Add this to the [Don't Load] section:
APPWIZ.CPL=no
This will hide the Add/Remove Programs icon in control Panel.
=================================================
You'll need to hide drives such as the A: and D: (CD-ROM)
backup the registry and/or export the following keys:
go to Start&gt;Run, type regedit. Navigate to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

Right-click on the Explorer key, choose new&gt;DWORD value, name it NoDrives.
To restict the A: (floppy), you need to assign a decimal value of 1. To
disable the CD-ROM (if it's drive D:) you would assign the decimal value 8.
To restrict both, you set a demcimal value of 9.
=================================================
You need to prevent them from accessing the Run box:
Add a new&gt;DWORD value named NoRun to the above key.
==================================================
You need to prevent them from using Internet Explorer's address bar as a run
box&gt;
Add a new&gt;DWORD value named NoFileUrl to the above key.
==================================================
Another way is to define only certain priograms that can be run. This can be a dangerous move
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
Add a new&gt;DWORD value, named RestrictRun and give it a value of 1

Now create a newKey named RestrictRun under HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
and define applications that you want access to run.

Ex. So you don't hose your system off the bat, right-click on the RestrictRun key, choose new&gt;StringValue, name it the number 1.Right-click on that, choose modify and type in regedit.exe. This is your way out if things go wrong. You should define apps such as your virus scanner and other programs you want access to. If the program isn't defined under the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\App Paths
You'll have to type in the full path to the program.
Ex.
2. E:\Program Files\Micrografx\ABC Graphics Suite\Picture Publisher 8\pp80.exe

reghakr