how to prevent users...? (W2K)

[aliabuodeh]

I would like to know how to prevent users in my domain from installing programs that they downloaded from the internet ?
Can you give full detail please?
(note: I'm using windows 2000 server and the students use windows 2000 Pro)

[The_Dude]

Put them in the restricted users group and no other group.

[The_Dude]

You could also try the Group Policy Editor. Start run type gpedit.msc

[kiohkohsak]

you can use restrict apps specify the exes that the user could run

example ms office winword.exe

and others.


when a user insatll software they need write access somewhere on the hard drive and it does not mean progrm folder it could be in a temp dir. when the software is installed new exe file are on the hard drive but the user cannot run them beacuse you did not specify that that user could run those exes.

any more prob email me at aramsaja@nyit.edu

[kastetx]

restricting EXEs is cool, but unless they are signed, it is useless. If I would be the student, and I would be smart, I would do a save as, and save my app as winword.exe and it would work. Which school do you work in? Anyway, if they are not admins, they wont install. Use policies- thats always good. Use NTFS to protect hard drives with access rights, if done properly, users will not even be able to save the install files. If you want to go even further, use mandatory roaming profiles. The purpose of that is to have the students have particular rights and settings no matter where they go; and any chages would be discarded at logoff.