Problem solve Get help with specific problems with your technologies, process and projects.

How can we stop software installations without disabling write privileges?

We have disabled write privileges to the Windows folder to keep XP workgroup users from installing software, but this inhibits some programs from writing to their .ini files. Is there another way to stop software installations?
Put users in the local Users group, not Power Users or Administrators. That'll take care of the first problem, preventing users from writing to files in the Windows folder. Then, use Security Templates to change permissions on specific files, folders and registry keys, opening up holes just big enough for their legacy applications to work properly. See the help in Windows Server for more information about using them, or you can search Microsoft's Web site for numerous white papers about security templates.

Dig Deeper on Windows client management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.