How can I prevent users from installing software on their NT computers?

I am getting ready for an NT to Win2k conversion. How can I prevent users from installing anything on their computers? I have already disabled removable media, but I cannot seem to figure out how to handle unauthorized network installations.
NT 4.0 user cannot install software unless they are administrators on their local machine. Take them out of administrators group. This can be done using a script and the NT command:
NET LOCALGROUP Administrators [username]/DELETE.

Be careful -- they may not like it too much when they can't do stuff.

This was last published in October 2002

Dig Deeper on Microsoft Active Directory

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.