|
|||||||||
|
|||||||||
| |||||||||
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
 |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
Dev Shed Forums Sponsor:
|
|
|
|
#1
July 16th, 2008, 09:50 PM
|
||||
|
||||
|
Software to prevent installations
So new programs are being installed on certain machines which I've never had a problem with before, but it's just caused one computer to be seriously infected with something which may require a complete reinstallation.
With this said, I wanted to know what software would be good to prevent them from installating programs, but still allowing them to save files and do everything else that needs to be done. This is a radio station, so they are always creating commercials, viewing websites (saving bookmarks), etc, so I'd prefer not having a program that will restore the HD to a state previous to them logging on... but something that just prevents them from installing only... don't need to limit anything else. Thanks.
|
|
#2
July 16th, 2008, 09:53 PM
|
||||
|
||||
|
Quote:
Why not create a general Admin account for installing programs and then creating a limited account (limited as in not being able to install programs ;0) ) for their daily use. This is the way I have it set up on my workstation at home and it works well. I think there is a way to go into Administrative Tools->Computer Management->Local Users and Groups->Users-><specific user> .. there you can really fine tune what the user can and cannot do.
__________________
Bugs that go away by themselves come back by themselves Never take life seriously, Nobody gets out alive anyway.
|
|
#3
July 16th, 2008, 09:58 PM
|
||||
|
||||
|
Thanks for the reply... I had looked into that a long time ago for similar reasons, but couldn't find options to just prevent the installation of software. That's why I figured I'd look for software for this... If, however, you can explain how to just limit installations, that'd be great...
|
|
#4
July 16th, 2008, 10:07 PM
|
||||
|
||||
|
This looks VERY dicey but you could look into CACLS.exe
Code:
C:\Documents and Settings\mishii\Desktop>cacls.exe
Displays or modifies access control lists (ACLs) of files
CACLS filename [/T] [/E] [/C] [/G user:perm] [/R user [...]]
[/P user:perm [...]] [/D user [...]]
filename Displays ACLs.
/T Changes ACLs of specified files in
the current directory and all subdirectories.
/E Edit ACL instead of replacing it.
/C Continue on access denied errors.
/G user:perm Grant specified user access rights.
Perm can be: R Read
W Write
C Change (write)
F Full control
/R user Revoke specified user's access rights (only valid with /E).
/P user:perm Replace specified user's access rights.
Perm can be: N None
R Read
W Write
C Change (write)
F Full control
/D user Deny specified user access.
Wildcards can be used to specify more that one file in a command.
You can specify more than one user in a command.
Abbreviations:
CI - Container Inherit.
The ACE will be inherited by directories.
OI - Object Inherit.
The ACE will be inherited by files.
IO - Inherit Only.
The ACE does not apply to the current file/directory.
|
|
#5
July 17th, 2008, 02:19 AM
|
|||
|
|||
|
If you want to limit specific software installation you might need sms or tivoli but if you want to blokc all installation you can either use user access right control or they are some of those software where it will let you install but after you log out it will just uninstall and clear the temp file and revert everything back to its original state. (Normally universities use that in their student pc labs).
|
|
| Viewing: Dev Shed Forums > Operating Systems > Windows Help > Software to prevent installations |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
 |
|
|
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
