| Author |
How to stop install of downloads in w2kp
|
|
| jbinri 2002-04-11, 10:36 am |
| I'm trying to stop installation of downloads on my network.
The machines are win 2k pro's
I have Admin rights. How would I go about this? | |
| denis_baribeau 2002-04-11, 10:46 am |
| quote:
Originally posted by jbinri
I'm trying to stop installation of downloads on my network.
The machines are win 2k pro's
I have Admin rights. How would I go about this?
I think you gonna have to be little more specific on the question.Like what is it doing now that you want W2K no longer do. | |
| jbinri 2002-04-11, 10:51 am |
| I am working for a school now as an assistant admin.
We do not want students to be able to setup programs like Kazaa, Instant messengers and AOL accounts on the Systems.
We are running Windows 2k pro.
Is there a way I can prevent them from running setup, or downloading in general. | |
| denis_baribeau 2002-04-11, 12:25 pm |
| I cannot be concrete on this but i was just loking in internet explorer,tools tab,internet option,security,custom level and saw various setting that could be worth looking into it.I am not gonna change mine to find out.but if you wanna give it a try.
hope this help and hope to see more reply.Good luck | |
| vwdriver 2002-04-11, 1:03 pm |
| What rights do they have? Do they need to be able to save files to the hard drive? | |
| jbinri 2002-04-11, 1:19 pm |
| Yes, they do need to be able to download files from the net.
I looked into internet explorer,tools tab,internet option,security,custom level and saw that I could disable downloads, but is it possible to prevent installation of new programs, while still being able to download files?? | |
| jombeewoof 2002-04-11, 1:45 pm |
| ok this is how you disable em to install from cd-rom or other removable media(still working on from hard drive)
in mmc add the local computer policy snap-in go to user config>admin templates>windows installer> disable media source for any install | |
| Toby67 2002-04-11, 10:29 pm |
| What rights do they have? I thought that only users with admin rights could install software that modify system files or registry settings. Am I wrong? | |
| Johnny5Alive 2002-04-12, 3:22 am |
| Apply a Group or Local Policy Object that prohibits installation (execution) of files. | |
| jombeewoof 2002-04-12, 8:32 am |
| quote:
Originally posted by Johnny5Alive
Apply a Group or Local Policy Object that prohibits installation (execution) of files.
if you prohibit execution of files then you make that user more or less useless (no M$Word, Excel, etc... | |
|
| jombeewoof
i try what u said disable media install at mmc, but it still let me install programs tho
weird, seem like that fuction is no use to my pc | |
| bbraunstein 2002-04-13, 9:35 am |
| Preventing installations from removeable media prevents users from installing programs from the CD ROM. While this is useful, it doesn't prevent users from installing programs that they download from the internet, such as Kaz and Morhpeus.
To accomplish your goal, create a new group policy or modify the default domain policy in Active Directory that prevents users from installing new programs on their computers.
BB | |
| secondskin 2002-04-13, 9:28 pm |
| The bloke is talking about stand alone 2000 pros, so you cant use a domain policy since they are not part of a domain. You could install server, let them all join the domain, then use group policy , or download ISA and bloke them all from using the files like messenger and kazza. | |
| bbraunstein 2002-04-13, 11:31 pm |
| How about a mandatory profile? Would that work?
Other then that, the only thing I can think of is to restrict their NTFS permissions to the lowest level possible.
In theory, if you have a workgroup (less then 10 workstations) then centralized administration is not really necessary. Maybe you can just have management tell the users that company policy forbids them from installing extranneous programs on their computers. | |
|
| How about having them go through a proxy and limit the sites they can access? they do that to us at work  | |
| jbinri 2002-04-15, 8:09 pm |
| I still don't have a definitive answer.
Please Help. I have tried several ways to implement this, with no avail. | |
| Pavlov 2002-04-16, 7:58 am |
| But if the user is not a local admin of the local machine or a domain admin they shouldn't have this ability period. I would create a group policy and assign students to that group and force the instructors to work closely with the IT Admin staff. Let them know in advance when the students will need access to download and install and apply the group policy to those situations and remove it when that portion of the lesson is complete. Also, try suggesting a formal policy for the students to agree to and sign off on and make the penalty severe enough to make them think twice. Like downloading and installing software not specifically related to the course will be grounds for immediate dismissal without a refund for the course. | |
| mcdoud 2002-04-16, 12:39 pm |
| To limit installs, it might be possible, though tedious perhaps, to do this by use of NTFS file/folder permissions. Could you possibly restrict their execute permissions to a single folder (or select group of folders) as well as to selected files within those folders (such as Excel or Word)?
If you are needing to limit them to downloading certain files only, then I don't know what to tell you! | |
| Quisitor 2002-04-17, 6:39 am |
| Out PCs at work are totally locked down and the C drive is admin only access shared with C$,
we are given access to the second D:\ drive this would limit installs to the O/S drive to admin only - If KAZA and morpheus are a problem block their ports through a firewall! | |
|
| quote:
Originally posted by jbinri
I'm trying to stop installation of downloads on my network.
The machines are win 2k pro's
I have Admin rights. How would I go about this?
Make sure that no one has local user profiles on the machines. You may have to go machine by machine and delete local Users through the Users & Groups console in Computer Management, then coing to C:\Documents and Settings\ and removing any local user profiles you find there. Finally, change the Local Administrator password in case it's been hacked.
Everyone should be logging on through the Domain, with nothing more than User priviliges. If they can install software, they have Power User (or better) rights, which you have to eliminate. Good luck. Speak softly and carry a large LART. | |
| mrdrewca 2002-04-17, 11:51 pm |
| Make a group policy and go to User Config./Administrative Temp./Windows Comp./I.E./Browser Menus/ Then Disable Save This program to disk option.
D | |
| me? I dunno... 2002-04-18, 3:30 am |
| "internet filters"
www.cyberpatrol.com
There were quite a few other's too. | |
| jbinri 2002-04-18, 7:39 pm |
| You are running Win2k Pro.
You would like users to be able to download files, but you do not want them to be able to install any programs.
Is this possible in Win 2k pro?
Is there a feature to disable installation of software? |
|
|
|