Re: How to block users from installing other apps

On 2003-06-25 Noonan, Wesley wrote:
> Yeah, re-write your customized inhouse applications. That was a bad

Another way might be finding out, what additional permissions a normal user would need, adjusting ACLs accordingly and removing the users from the Local Administrators groups. Regmon [1] and Filemon [2] may be helpful in this process.
I have up to now run into few programs I couldn't convince of running with less privileges than suggested by $VENDOR.

> Making someone an admin is just that. To my knowledge, anything you

ACK. [1] http://www.sysinternals.com/ntw2k/source/regmon.shtml [2] http://www.sysinternals.com/ntw2k/source/filemon.shtml

Regards
Ansgar Wiechers