How do I restrict users from installing programs on Windows 2000?

I created a domain in my company with the domain controller as an NT 4 server. All the client machines are using Windows 2000 Professional. How do I restrict a user from installing programs on their Windows 2000 computer? Is there any anything in the policy editor or anywhere in NT 4 server to apply restrictions as to prevent the 2000 clients from installing programs?
Windows NT 4.0 can use System Policies to lock down clients, and the changes will be utilized by W2K clients who are member computers in the domain and for users who use domain accounts.

Here are some good resources:

http://www.oreilly.com/catalog/winsyspe/ (This is a book on System Policies.)

http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/poleditAD.htm?id=925 (Use the Windows 2000 version of Systems Policy editor to create the template.)

http://www.microsoft.com/office/ork/2003/seven/ch26/SecD02.htm (This has quite a bit that is only Office related, but does address the issue of using System Policies on Windows 2000 to do other things.)

This was first published in April 2004

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.