Prevent users from installing programs!

[blubomber]

I am running a windows 2000 domain and i am trying to find a way to prevent users on windows 2000 pro workstations from installing programs. I have tried looking through Domain and local policies but cant find anything about preventing the installation of programs.

Any help would be greatly appreciated.

[Jarhed7276]

Go to Users and Passwords in control panel and change the type of user account. Maybe to user or (I think) maybe even power user will not allow the account to install software.

[blubomber]

Jarhed, these are all domain users. They do not have local accounts on the workstations. They are all part of the Domain Users group but they can still install some programs.

[washe]

you can create accounts with the restricted user mode dont forget to add the domain.... so they cannot change the configuration or install software....

edit: didt read jared post.... eck......

I know its possible because my login on my company is that way i can access any computer but im restricted to use only the software that its already pre-installed

[DVNT1]

In a GPO, go to User Config, Admin templ., System, Don't Run specified Windows applications and then Enable it, while entering setup.exe and install.exe in the list.

I think there is an additional setting relating to MSI files but I don't remember the details.

[blubomber]

Thanks DVNT1, i will give that a shot.

Thank you all for the replies.