how to prevent any 1 ,even with adminstrator rights , to block all kind of software in my XP?can any 1 pls help me?
2006-06-23 00:04:04 · 4 answers · asked by vnethirajan 2 in Computers & Internet ➔ Security
there is no way to block the software installation by a user with administrator rights. Because, any setting change, software installation or registry key change to block software installation can be removed or rechanged with administration rights.
You should define a new user with limited rights and the computer should be logged on with that user. User shoul not be able to write to your "Program Files" folders or "C:\" disk at all.
2006-06-23 01:15:33 · answer #1 · answered by M?T 1 · 0⤊ 0⤋
If you're computer is "stand-alone", then M?T gave you the correct answer: software installation is an administrator privilege, and you cannot prevent this in any way that a skilled administrator could not undo. If the people using your computers are not "skilled", they shouldn't have admin accounts in the first place. His advice is right on: create another user account without administrative privileges, and you can withhold the right to install software.
However ... if your computer is connected to a LAN and a server, and administered via Active Directory, then you have another option: the administrator of the Active Directory domain can set a "Group Policy Object" (GPO) that prevents connected computers from installing software. Even if users on these computers have (local) admin accounts.
If the second paragraph sounds all greek to you, you're probably not connected in this way :-)
2006-06-23 02:30:35 · answer #2 · answered by SecurityFreak 4 · 0⤊ 0⤋
all correct answers. If they need admin rights to run a certian program then you can go to that registry key and give them admin rights and set them up as a users. Call the company up that made the software they should be able to tell you what keys in the registry that needs to have admin rights.
2006-06-23 12:45:03 · answer #3 · answered by dualmp 4 · 0⤊ 0⤋
you can't. You can only prevents them, but there is no guarantee, that people would find a way around it. Perhaps, the best simple way is to make noone, except you, have an administrator account. Other more restrictions, would need to edit the registry
2006-06-23 01:14:27 · answer #4 · answered by Lie Ryan 6 · 0⤊ 0⤋