Yes, through ACLs on registry keys like "Software". IF the users
have only read only access on some of them installation packages won't
work. However, remember that a lot of software don't need a "formal"
installation process. You can play with the ACLs on the Program Files
folder too, but I believe that it might break some apps.

Regards,

On Fri, 8 Oct 2004 05:45:31 -0700 (PDT), chang zhu <cyz2000 (at) yahoo (dot) com [email concealed]> wrote:
> Hi, all
>
> The users are not local administrators. We configure
> group policy to prevent user installs but it seems
> that it blocks only .msi packages. Users still can
> install applications through ex. setup.exe...Can we
> really block users from installing applications
> through Group policy?
>
> Any idea or thoughts on this?
>
> Plus, if we need to block users from saving .mp3 file
> on their computers, can we do it through group policy?
>
> we are on windows2000 and XP environment.
>
> Thanks always,
>
> Chang
>
>
> _______________________________
> Do you Yahoo!?
> Declare Yourself - Register online to vote today!
> http://vote.yahoo.com
>
> ------------------------------------------------------------------------
---
> ------------------------------------------------------------------------
---
>
>

--
Augusto Paes de Barros, CISSP
http://www.paesdebarros.com.br

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]