Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

List Archives

Subject: [ActiveDir] Restrict install Software
Prev Next
You are not authorized to post a reply.

AuthorMessages
AD000001249User is Offline

Posts:0

08/23/2005 9:31 AM  
Deat All,

My Name is Sameer Karawan, i have Windows server 2003 Standard Edition and
we have internal Domain installed with Active Directory.

I did not make any Group Policy at all, and all of my users have working
under the domain and without make thing on the group Plociy.

My Manager Asked me to do something which is Very good.

He asked me to Make All the users which they are under the Domain , the
ability to Prevent them from installaing any software at all.

So any user who is under my doamin, he will be unable to install any
software at al, so can any one guide me how to do that .

Thanks ;
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
jamesblairUser is Offline

Posts:0

08/23/2005 10:07 AM  
________________________________

From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Semsem-Karawan
Sent: Tue 23/08/2005 7:30 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Restrict install Software

Deat All,

My Name is Sameer Karawan, i have Windows server 2003 Standard Edition and
we have internal Domain installed with Active Directory.

I did not make any Group Policy at all, and all of my users have working
under the domain and without make thing on the group Plociy.

My Manager Asked me to do something which is Very good.

He asked me to Make All the users which they are under the Domain , the
ability to Prevent them from installaing any software at all.

So any user who is under my doamin, he will be unable to install any
software at al, so can any one guide me how to do that .

Thanks ;
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
AD000001249User is Offline

Posts:0

08/23/2005 10:30 AM  
Hi james,
Thanks For your reply.
I have only one internal Domain with this name ( SPOTMARKET.COM), and this
domain have a One Domain Controller 2003 and No any other Domain Controller
or No any other member servers except 2 Member server , one for File server
& onther one for ISA Server.

what about :-

1. Software restriction Policies.

can i use it to make this.

2. All My users they are configured to work as Administrators on there local
Machines, not normal users.

Also you said that ( Disable Windows Installer ) , is that enough for me ?
I hope you can guide me littile more.
> Sameer,
>
> Not knowing your domain setup this is pretty hard to answer. Have
> you tried just making users member of the Users group on the local
> workstation. Should you be looking at a group policy setting you can
> find one under Computer Configuration - Administrative Templates -
> Disable Windows Installer & also Prevent User Installs. You need to
> however be careful of this and should you apply it at domain level
> as a separate GPO you need to make sure the group/s OR user/s who do
> install software packages only have Read and not Apply Group Policy
> otherwise no one will be able to install software. This sort of
> policy GPO in my mind would be best applied at OU level and not at
> domain level.
>
> Hope this helps a little more info would allow a better answer.
>
> James
>
> ________________________________
>
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Semsem-Karawan
> Sent: Tue 23/08/2005 7:30 AM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] Restrict install Software
>
> Deat All,
>
> My Name is Sameer Karawan, i have Windows server 2003 Standard
> Edition and we have internal Domain installed with Active Directory.
>
> I did not make any Group Policy at all, and all of my users have working
> under the domain and without make thing on the group Plociy.
>
> My Manager Asked me to do something which is Very good.
>
> He asked me to Make All the users which they are under the Domain , the
> ability to Prevent them from installaing any software at all.
>
> So any user who is under my doamin, he will be unable to install any
> software at al, so can any one guide me how to do that .
>
> Thanks ;
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Restrict install Software



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:jonrmeyer
New TodayNew Today:7
New YesterdayNew Yesterday:0
User CountOverall:4279

People OnlinePeople Online:
VisitorsVisitors:77
MembersMembers:0
TotalTotal:77

Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use