Application lockdown

[taplitd]

I would like to prevent users from installing any applications under Windows 95? Is this possible?

[RWSchlatter]

It depends on how your users may use their systems. If you can setup policies, you can restrict them to use only a list of approved programs, and will inhibit them from starting an install program.

______________
Regards - Richard

[taplitd]

This actually only applies to a few shared machines in the conference rooms? How do I prevent users from installing apps on these shared machines.
thanks

[RWSchlatter]

J assume that the Policy Editor should be enough to do the job. You will find the Policy Editor on the Win95 Install CD, Admin directory.

For all machines, create an ERD diskette. Have a copy of the Policy Editor also on the ERD.

In the Policy Editor, define a machine policy and take away all unneeded options. Especially deny the usage of the Registry Editor and Policy Editor self. Deny usage of any not listed programs. Build a list of accepted programs (eg Office, IE, other locally created software). Possibly tailor the StartMenu>Programs to this restricted list. Disable the Run command from StartMenu.

Possibly use also TweakUI (see Downloads section of this site) to remove the diskette and CD drives from visibility in Explorer (depends on usage reqirements, what data they bring along).

If you have very knowledgable users, don't keep REGEDIT nor POLEDIT on the machines, they may know howto boot in safe mode and modify polices from therre.
______________
Regards - Richard<P ID="edit"><FONT class="small">Edited by RWSchlatter on 01/23/01 12:20.</FONT></P>