Free software to stop unauthorised installation

[M_S]

Does anybody know of any freeware software that will make it impossible for an unauthorised user to install software on a shared machine?

[lupus]

Windows XP Limited Users Accounts capabilities...

[Close_Hauled]

Originally Posted by M_S

Does anybody know of any freeware software that will make it impossible for an unauthorised user to install software on a shared machine?

Windows XP Home and Pro can limit a users ability to install software. There is nothing that you can do to stop 100% of the installs. A program just needs to be dowloaded to be usable and considered installed. Also, even restricted users can install some software, even though they should not be able too. My users manage to do it all the time, and they are all in the "Restricted user" group. Some installers manage to slip by the restriction.

The best thing to do is:

1) Use Windows XP Pro.

2) Add everyone to the "Restricted user" group, even yourself.

3) Reserve the admin password for yourself, and another person you trust.

4) Do not log in as an admin, or admin equivalent on a daily basis. Use a restricted account for daily work.

5) Be diligent about auditing the software inventory on your system.

[M_S]

Thanks, Close Hauled. I posted a similar topic over at donationcoder.com, and picked up a link to this new MS PowerToy: http://www.microsoft.com/windowsxp/s...s/default.mspx I haven't tried it yet, but on paper, it seemd to fit my needs perfectly.

[kareldjag]

Hi,

Windows policy restrictions is quite limited.

Trust-no-Exe is an executable filter which can be used in multiple computers/workstations with a central management (Administrator):

http://www.beyondlogic.org/solutions...ust-no-exe.htm

It works as a service (with bltrust.sys kernel driver) and is integrated in the control panel.
Very simple and easy to use (Access/Deny list).

Regards

[M_S]

That looks good - lightweight and straightforward. I'll try this before trying the MS PowerToy. Thanks.