Ask the Expert

How can we stop software installations without disabling write privileges?

We have disabled write privileges to the Windows folder to keep XP workgroup users from installing software, but this inhibits some programs from writing to their .ini files. Is there another way to stop software installations?

    Requires Free Membership to View

Put users in the local Users group, not Power Users or Administrators. That'll take care of the first problem, preventing users from writing to files in the Windows folder. Then, use Security Templates to change permissions on specific files, folders and registry keys, opening up holes just big enough for their legacy applications to work properly. See the help in Windows Server for more information about using them, or you can search Microsoft's Web site for numerous white papers about security templates.

This was first published in July 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: