Welcome to Soft32 Forums!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

How to deprive Power Users of the rights to install any so..

 
   Soft32 Home -> Win3 Arch -> Security Admin RSS
Next:  New User Accounts  
Author Message
Crystal

External


Since: Jan 31, 2005
Posts: 15



(Msg. 1) Posted: Thu Oct 20, 2005 6:12 pm
Post subject: How to deprive Power Users of the rights to install any software
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

We are in a Workgroup environment and using XP SP2. I have to give my users
Power Users rights otherwise some software like Citrix client cannot run.
However, with Power Users right they can still install some small software
(not big one) like google I.E. tool bar, chat software, and etc. I wonder if
anyone can tell me how to deprive Power Users of the rights to install any
software? Thanks.
Back to top
Login to vote
Steven L Umbach

External


Since: Apr 07, 2006
Posts: 2285



(Msg. 2) Posted: Sat Oct 22, 2005 5:57 am
Post subject: Re: How to deprive Power Users of the rights to install any software [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

You should be able to configure the software to run as a regular user by
modifying the ntfs permissions and possibly registry permissions to be what
a power user has for that application by starting with the folder where the
application is [probably under program folders] and also checking the all
users profile for the application data folder and a subfolder used by the
application for the application. There is also a security template called
compatws.inf that can be imported via Local Security Policy though it would
give the users excessive permissions in my opinion. Beyond that you can
implement Software Restriction Policies in XP Pro to very effectively
restrict a user with the proper hash or path rules. Just keep in mind that
..lnk shortcuts such as the desktop are considered restricted by SRP. For any
XP SP2 computers the Shared Computer Toolkit free from MS is something to
look at and it does enable a version of SRP for XP Home which is really
great. The links below may help. --- Steve

http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit...-us/Def

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- SRP
http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx -- Shared
computer toolkit.

"Crystal" <Crystal.DeleteThis@discussions.microsoft.com> wrote in message
news:77A5F3CB-5DD0-4D0B-BD95-58DA51D1B628@microsoft.com...
> We are in a Workgroup environment and using XP SP2. I have to give my
> users
> Power Users rights otherwise some software like Citrix client cannot run.
> However, with Power Users right they can still install some small software
> (not big one) like google I.E. tool bar, chat software, and etc. I wonder
> if
> anyone can tell me how to deprive Power Users of the rights to install any
> software? Thanks.
Back to top
Login to vote
Crystal

External


Since: Jan 31, 2005
Posts: 15



(Msg. 3) Posted: Sun Oct 30, 2005 11:53 am
Post subject: Re: How to deprive Power Users of the rights to install any softwa [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

These information are very educational and helpful. I've finally sorted out
my problem!

"Steven L Umbach" wrote:

> You should be able to configure the software to run as a regular user by
> modifying the ntfs permissions and possibly registry permissions to be what
> a power user has for that application by starting with the folder where the
> application is [probably under program folders] and also checking the all
> users profile for the application data folder and a subfolder used by the
> application for the application. There is also a security template called
> compatws.inf that can be imported via Local Security Policy though it would
> give the users excessive permissions in my opinion. Beyond that you can
> implement Software Restriction Policies in XP Pro to very effectively
> restrict a user with the proper hash or path rules. Just keep in mind that
> ..lnk shortcuts such as the desktop are considered restricted by SRP. For any
> XP SP2 computers the Shared Computer Toolkit free from MS is something to
> look at and it does enable a version of SRP for XP Home which is really
> great. The links below may help. --- Steve
>
> http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit...-us/Def
>
> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
> --- SRP
> http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx -- Shared
> computer toolkit.
>
> "Crystal" <Crystal RemoveThis @discussions.microsoft.com> wrote in message
> news:77A5F3CB-5DD0-4D0B-BD95-58DA51D1B628@microsoft.com...
> > We are in a Workgroup environment and using XP SP2. I have to give my
> > users
> > Power Users rights otherwise some software like Citrix client cannot run.
> > However, with Power Users right they can still install some small software
> > (not big one) like google I.E. tool bar, chat software, and etc. I wonder
> > if
> > anyone can tell me how to deprive Power Users of the rights to install any
> > software? Thanks.
>
>
>
Back to top
Login to vote
azneita

External


Since: Aug 08, 2007
Posts: 1



(Msg. 4) Posted: Tue Aug 07, 2007 8:15 pm
Post subject: Re: How to deprive Power Users of the rights to install any softwa [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

how exactly did you go about it then? thanks.

"Crystal" wrote:

> These information are very educational and helpful. I've finally sorted out
> my problem!
>
> "Steven L Umbach" wrote:
>
> > You should be able to configure the software to run as a regular user by
> > modifying the ntfs permissions and possibly registry permissions to be what
> > a power user has for that application by starting with the folder where the
> > application is [probably under program folders] and also checking the all
> > users profile for the application data folder and a subfolder used by the
> > application for the application. There is also a security template called
> > compatws.inf that can be imported via Local Security Policy though it would
> > give the users excessive permissions in my opinion. Beyond that you can
> > implement Software Restriction Policies in XP Pro to very effectively
> > restrict a user with the proper hash or path rules. Just keep in mind that
> > ..lnk shortcuts such as the desktop are considered restricted by SRP. For any
> > XP SP2 computers the Shared Computer Toolkit free from MS is something to
> > look at and it does enable a version of SRP for XP Home which is really
> > great. The links below may help. --- Steve
> >
> > http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit...-us/Def
> >
> > http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
> > --- SRP
> > http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx -- Shared
> > computer toolkit.
> >
> > "Crystal" <Crystal RemoveThis @discussions.microsoft.com> wrote in message
> > news:77A5F3CB-5DD0-4D0B-BD95-58DA51D1B628@microsoft.com...
> > > We are in a Workgroup environment and using XP SP2. I have to give my
> > > users
> > > Power Users rights otherwise some software like Citrix client cannot run.
> > > However, with Power Users right they can still install some small software
> > > (not big one) like google I.E. tool bar, chat software, and etc. I wonder
> > > if
> > > anyone can tell me how to deprive Power Users of the rights to install any
> > > software? Thanks.
> >
> >
> >
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Power User Install Rights - When I goto the Overview writeup on "Microsoft Windows AntiSpyware" ..

Users need printer and driver install rights - I have 350 xp laptops in domain environment and I am having a problem. I can't find aywhere within XP or group policy....

Users need printer and driver install rights - The users are in a domain environment during the day, but need to be able to add their own home printer to XP so that....

Power Users (No Install Permission) - I have a set of computers that my sofware developers use. Currently their account under the "Users" default ...

To install mysql on Power users groups. - I want to install programs which modify system services area. now I can't install mysql, tomcat, IBM DB2 on Power user...

lost certain power user rights?? - I have xp pro. I used to have access to system tools programs like defrag and system restore. A few days ago I tried...
       Soft32 Home -> Win3 Arch -> Security Admin All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
 Windows
 Linux
 Mac
 PDA


[ Contact us | Terms of Service/Privacy Policy ]