Hey guys

I have a problem I need assistance with. I want to restrict users on XP machines from installing software by using group policies. The reason I wish to do it this way rather than just making the user account a restricted one is that they are on a mixed network and have autoadminlogon for Novell.

Any templates or ideas are greatly appreciated.


Russ

__________________
Go hard or go home!

Report this post to a moderator

Russ,

Regular users can't install software. You have to have administrative rights on the computer. You can have an auto logon with a normal user.

Are you saying that all users on your networks are also local administrators? If so, you're basically SOL.

__________________
MCSA Charter Member
MCSE Early Achiever
Server+
Dell certified
HP certified

Report this post to a moderator

Ahhhh - yes and no.

This particular network is - or should I say certain goups of machines are.

If we make them just a user on the local machine the Novell autoadmin puts you straight into the machine without being able to logon as administrator. The only way to get in is to break the novell login and then you are given the opportunity to log on as another user. In this school site there is a need for the tutors to be able to install software on the lab machines, but we do not want the students to be able to do this.
Unfortunately this is a site we manage, but is not fully managed by us and the 'site admin' has some set ideas about things.

__________________
Go hard or go home!

Report this post to a moderator

I'm confused.

You do not have to be a local Administrator for the autoadmin feature to work for Windows or for Novell.

http://support.novell.com/cgi-bin/s...i?/10087621.htm

If you really want a crazy solution, you can create a logon script that removes the student's account from the local Administrator's group. Then create a logoff script that puts them back in the local Administrator's group.

that way, the only time they have administrative priveledges is during logon.

Personally, whoever works on the Novell side of the network needs to correct the autoadmin logon feature, because you don't have to be a local admin to make it work.


Hope that helps.

__________________
MCSA Charter Member
MCSE Early Achiever
Server+
Dell certified
HP certified

Report this post to a moderator

I have had issue where reg users could intall small programs that didn't need access to system files/folders.

__________________
Do you have a love/hate relationship with computers? Do you yell at your computer and expect it to answer?

TECHNOLOGY no place for wimps!!

BOSTON Red Sox World Series Champions 2007

Bedardinc.com
SalemCyberSpace.org

Report this post to a moderator