Windows XP - Prevent 'Users' Installing Software

PiKe · 4 Mar 2009 at 11:07

Is this possible? Perhaps with gpedit?

Thanks

corsa · 4 Mar 2009 at 11:35

Is the PC on a domain?

PiKe · 4 Mar 2009 at 11:37

No, just a local machine.

corsa · 4 Mar 2009 at 11:41

Within "User Accounts" create user with Restricted user settings

PiKe · 4 Mar 2009 at 11:44

I've created a Limited User but they can still install software that doesn't require elevated permissions.

corsa · 4 Mar 2009 at 11:51

You can set up a password protected system with Parental Controls in Control Panel. That way they would have to enter a password for the actions you selected in Parental Controls.

PiKe · 4 Mar 2009 at 11:56

In XP? Does that even exist?

corsa · 4 Mar 2009 at 12:00

Thought you was using Vista lol, What version of XP you running?

marc2003 · 4 Mar 2009 at 12:00

have a look at windows steadystate. you can lock down machines pretty tight with this....

http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

corsa · 4 Mar 2009 at 12:08

You can just edit the registry rather than installing any additional software

corsa · 4 Mar 2009 at 12:10

(WITH ADMINISTRATOR ACCOUNT)
1 - Right click on My Computer > Manage
2 - Open the Local Groups and Users > Then open Users
3 - Search for the user account that you want to restrict the installations and other stuffs > Righ-click on it > Select Properties
4 - On the Member Of tab > Remove all group in this list > Click ADD and then write USERS Press OK and OK again.
5 - Close all windows, make logoff and logon with the users that we assign the new group.
6 - Try to install or make changes in the Control Panel

FishThrower · 4 Mar 2009 at 12:43

just add the user account to be a member of the power users group

right click on my computer, goto manage, then goto local users and groups

PiKe · 4 Mar 2009 at 13:36

corsa said:
(WITH ADMINISTRATOR ACCOUNT)
1 - Right click on My Computer > Manage
2 - Open the Local Groups and Users > Then open Users
3 - Search for the user account that you want to restrict the installations and other stuffs > Righ-click on it > Select Properties
4 - On the Member Of tab > Remove all group in this list > Click ADD and then write USERS Press OK and OK again.
5 - Close all windows, make logoff and logon with the users that we assign the new group.
6 - Try to install or make changes in the Control Panel

That's how the account is set up anyway. You can still access control panel and make changes.

corsa · 4 Mar 2009 at 13:38

PiKe said:
That's how the account is set up anyway. You can still access control panel and make changes.

Quick way to do this is to make a Registry change for a given user. Log on as the user to restrict, and in HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPolicies Explorer, set or create a REG_DWORD value named NoControlPanel and set it to 1. To disable it, delete the value or set it to 0

osc89er · 4 Mar 2009 at 14:13

And how about secpol.msc to edit the local policy?

Burnsy2023 · 4 Mar 2009 at 14:20

marc2003 said:
have a look at windows steadystate. you can lock down machines pretty tight with this....

http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Have a look at this first, before fiddling with the registry.