disable admins from running/installing certain programs

Hi there fellow Microsofters!

I am a part System Admin at a small office with no Windows domain (just
workgroup), and would like to carry out the following tasks on my co-workers'
Windows XP Pro computers (locally), while enabling them as administrators (so
they can install / uninstall software / maintain their PCs).

Here is the task I would like to carry out (remember, they have
Administrator accounts as well, but not via Safe Mode, and remember, there is
no domain):

Disable them from running / installing certain programs / ports.

Thanks!
Row

Mow Row wrote:
Hi there fellow Microsofters!

I am a part System Admin at a small office with no Windows domain (just
workgroup), and would like to carry out the following tasks on my co-workers'
Windows XP Pro computers (locally), while enabling them as administrators (so
they can install / uninstall software / maintain their PCs).

Here is the task I would like to carry out (remember, they have
Administrator accounts as well, but not via Safe Mode, and remember, there is
no domain):

Disable them from running / installing certain programs / ports.


As long as you grant your users administrative privileges, you
cannot prevent them from doing *anything*. If you want to control what
gets installed or executed, you have to remove your users'
administrative privileges.


--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

Mow Row wrote:
Hi there fellow Microsofters!

I am a part System Admin at a small office with no Windows domain
(just workgroup), and would like to carry out the following tasks
on my co-workers' Windows XP Pro computers (locally), while
enabling them as administrators (so they can install / uninstall
software / maintain their PCs).

Here is the task I would like to carry out (remember, they have
Administrator accounts as well, but not via Safe Mode, and
remember, there is no domain):

Disable them from running / installing certain programs / ports.

Until you take away their administrative rights - they can undo whatever you
do in many ways and do whatever they desire without much effort at all.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Mow Row wrote:

Hi there fellow Microsofters!

I am a part System Admin at a small office with no Windows domain (just
workgroup), and would like to carry out the following tasks on my co-workers'
Windows XP Pro computers (locally), while enabling them as administrators (so
they can install / uninstall software / maintain their PCs).

Here is the task I would like to carry out (remember, they have
Administrator accounts as well, but not via Safe Mode, and remember, there is
no domain):

Disable them from running / installing certain programs / ports.

Thanks!
Row

See replies to your prior SAME post. Asking again every 3 minutes won't
change the answers.

If you reposted because of a bogus error message then stop using the
webnews-for-dummies interface to Usenet that Microsoft uses to pretend
they have these forums. Use a real NNTP client and connect it to your
NNTP provider (msnews.microsoft.com is free but only carries the
microsoft.public.* newsgroups).

OK thanks Vanguard. I will work on the NNTP thing. However, this is not
exactly the same question.

"VanguardLH" wrote:

Mow Row wrote:

Hi there fellow Microsofters!

I am a part System Admin at a small office with no Windows domain (just
workgroup), and would like to carry out the following tasks on my co-workers'
Windows XP Pro computers (locally), while enabling them as administrators (so
they can install / uninstall software / maintain their PCs).

Here is the task I would like to carry out (remember, they have
Administrator accounts as well, but not via Safe Mode, and remember, there is
no domain):

Disable them from running / installing certain programs / ports.

Thanks!
Row

See replies to your prior SAME post. Asking again every 3 minutes won't
change the answers.

If you reposted because of a bogus error message then stop using the
webnews-for-dummies interface to Usenet that Microsoft uses to pretend
they have these forums. Use a real NNTP client and connect it to your
NNTP provider (msnews.microsoft.com is free but only carries the
microsoft.public.* newsgroups).