Q: How can I restrict employees from installing anything on there PCs? I would like to do this through Group Policy on my domain controller.
A: You can use Software Restriction Policies to fully lock machines down, and only run applications you specify. This is a lot of work, but is just what the doctor ordered for your situation.
This was first published in August 2005