Group Policy Question?

[PeterGriffin]

NEW PROBLEM:

I think I have a bigger problem now.
It looks like for some reason none of my GPOs are going into effect. I have no idea why this would be.

I have an OU called GPOtest and a couple of users in that OU.
On that OU I have set a GPO set up.
Now, when I logon to the server locally the GPO takes effect.
But, when I logon to the server from another computer that is part of the domain, the GPO is ignored.

What is wrong?


First Problem:

I want to create a gpo that disable a user from being able to install ANY application, not just using the windows installer.

Where in the gpo would I go to enable this disable (haha, that sounds funny)?



Thanks

[sixf00t4]

i believe changes to the registry would work there.

[PeterGriffin]

That would mean that I have to visit each machine.
I want this to apply to only users in a certain OU.

[sixf00t4]

sorry, maybe i was vague. i meant restrict access to changes to the registry. but maybe that wasnt even the right idea sorry.

i just went into mmc, and i can find is just a way to disable ALL software. or let certain distributors access.