I could be wrong here, but to make a change like that (if it even existed in the registry) would require you to be an admin. An admin could also undo the change.

A setting like that would render the OS useless if the admin couldnt undo it.

Again, I could be wrong here. I use the stuff from BeyondTrust (formly DesktopStandards Application Security). This can do what your looking for, commercial, yet check (per lic).

- Nick

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] on behalf of Rocky
Sent: Thu 2/22/2007 7:51 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Prevent users/admin from installing softwares.

Hey Guys,

Is there a way to restrict everyone including adminisrator rights
from installing softwares in xp pro? It should be done on registry
or gpedit?

we don't want to use 3rd party softwares like winguard.

Thanks a lot!

[ reply ]