Restrict users to install applications?

Hello.

Is there a way to restrict the users to install applications on WS?
The Users must have due a emulation Program administartion rights on his WS.

The install of application must be availble for the domain admins.

thanks.

Hello marsias,

If they are admins, no way.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello.
>
> Is there a way to restrict the users to install applications on WS?
> The Users must have due a emulation Program administartion rights on
> his WS.
>
> The install of application must be availble for the domain admins.
>
> thanks.
>

marsias <(E-Mail Removed)> wrote:
> Hello.
>
> Is there a way to restrict the users to install applications on WS?
> The Users must have due a emulation Program administartion rights on
> his WS.
> The install of application must be availble for the domain admins.
>
> thanks.

The short answer is no. Rather than giving the users admin rights, do a
little work to find out where in the file system & registry the application
requires access, and change the permissions accordingly. Process Monitor (a
Sysinternals tool now available from Microsoft) will help - log in as the
user (w/o admin rights) and use RunAs to launch Process Monitor, then launch
the app itself. You'll need to figure out the rest from there (including
what views / filters to use), but it's not generally too hard.

Also, contact the application developer to a) find out what file
system/registry permissions they need and b) yell at them for not writing
good code - there's no valid excuse for it.