Results 1 to 5 of 5
  • Thread Tools
  1. New Lounger
    Join Date
    Aug 2002
    Location
    Cambridge, Massachusetts, USA
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Windows Installer

    Whats the best/easiest way to "lockdown" a pc so that the average Joe/Jane non-Admin cannot install software? I've read about a registry edits (which I can handle) and the group policy editor (which I've never used). Any guidance from on high? <img src=/S/confused.gif border=0 alt=confused width=15 height=20>

  2. Subscribe to our Windows Secrets Newsletter - It's Free!

    Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!

    Excel 2013: The Missing Manual

    + Get this BONUS — free!

    Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!

  3. Plutonium Lounger Leif's Avatar
    Join Date
    Dec 2000
    Location
    U.K.
    Posts
    14,010
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Windows Installer

    There are many registry tweaks to help lock down a pc - see JSI Tip # 0050 and its associated links for some idea of what can be done.

    Possibly the simplest would be to remove access to the Control Panel (Incl. add/remove programs), inhibit the autostart for CD's and remove Run from the Start menu.

  4. Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    19,802
    Thanks
    1
    Thanked 516 Times in 471 Posts

    Re: Windows Installer

    What kind of privileges do they need? You could put them into the user group. A user can not install software. You should assign a strong password to the local administrator account also.

    Joe

  5. New Lounger
    Join Date
    Aug 2002
    Location
    Cambridge, Massachusetts, USA
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Windows Installer

    Good question. Let me try to be more specific. I do not want users to be able to install software to their pcs without my doing so. No webshots, messenger programs, spyware, etc.

    That said, I gather that somehow you can allow Windows Installer to install components of Office 2000 or other specified programs without having full access to the installer functions. If I could fine tune this function it would be helpful, but I'm willing to take the big club approach if necessary.

    Cliff

  6. Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    19,802
    Thanks
    1
    Thanked 516 Times in 471 Posts

    Re: Windows Installer

    To do all this you'll have to be logged in as an administrator. Right click on My Computer. Select Manage. Open 'Local Users and Groups'. Click on Groups. Double click on users. Add the userid to the user group. Members of the user group can not install most software on a Win2k machine. Click OK. Click on Users. Double click on the userid. Click on the Member Of tab. Make sure User is the only group. Assign a strong password to the local machine Administrator. If that is not sufficient you'll need to investigate group policies. Use Windows Explorer later as needed to manipulate the Start menu.

    Joe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •