I am a Junior technician at a high school in England. Some of our pupils are being loaned laptops for the summer holidays for exam/course work. I would like to prohibit them from installing any additional software on these machines. Can I accomplish this through the registry without having to adjust the individual user accounts and permissions?
There are a couple of ways to do this. One is to use RestrictRun, as detailed here.
You can also deny access to specific programs using NTFS permissions.
To prevent a user or group from running "program.exe":
\program.exe /E /D
You can also create a simple user-level account on each machine that doesn't have permissions for installing software.
Dig deeper on Windows Operating System Management
Related Q&A from Serdar Yegulalp, WinIT
Frustrated admins have been dealing with extend.dat error messages since Outlook 97. Our expert sheds some light on this all-too-common Outlook error.continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.