|
|
| RussS 2004-09-20, 12:19 am |
| Hey guys
I have a problem I need assistance with. I want to restrict users on XP machines from installing software by using group policies. The reason I wish to do it this way rather than just making the user account a restricted one is that they are on a mixed network and have autoadminlogon for Novell.
Any templates or ideas are greatly appreciated.
Russ | |
| curiousgeorge 2004-09-20, 11:22 am |
| Russ,
Regular users can't install software. You have to have administrative rights on the computer. You can have an auto logon with a normal user.
Are you saying that all users on your networks are also local administrators? If so, you're basically SOL. | |
|
| Ahhhh - yes and no.
This particular network is - or should I say certain goups of machines are.
If we make them just a user on the local machine the Novell autoadmin puts you straight into the machine without being able to logon as administrator. The only way to get in is to break the novell login and then you are given the opportunity to log on as another user. In this school site there is a need for the tutors to be able to install software on the lab machines, but we do not want the students to be able to do this.
Unfortunately this is a site we manage, but is not fully managed by us and the 'site admin' has some set ideas about things. | |
| curiousgeorge 2004-09-20, 5:41 pm |
| I'm confused.
You do not have to be a local Administrator for the autoadmin feature to work for Windows or for Novell.
http://support.novell.com/cgi-bin/s...i?/10087621.htm
If you really want a crazy solution, you can create a logon script that removes the student's account from the local Administrator's group. Then create a logoff script that puts them back in the local Administrator's group.
that way, the only time they have administrative priveledges is during logon.
Personally, whoever works on the Novell side of the network needs to correct the autoadmin logon feature, because you don't have to be a local admin to make it work.
Hope that helps. | |
| prezbedard 2004-09-30, 10:35 pm |
| I have had issue where reg users could intall small programs that didn't need access to system files/folders. |
|
|
|