We have to allows the users of our systems to be Administrators in order for
our programs to work properly. With this being the case, is there a way or
is there a program or utility that will keep programs from being installed
even though the users had Administrative priveledges?

Thanks

That is a tall order but you can use Software Restriction Policies and
configure enforcement to include local administrators. I suggest that you
configure it under computer configuration. Beware that any local
administrator however can boot into safe mode to bypass SRP and of course a
local administrator can also unjoin the computer from the domain. The link
below explains more and realize the shortcuts by default are included in the
list of extensions that can be blocked. Make use of the application log on
the computer if you are having trouble tweaking the SRP settings as an event
will be recorded when an application is blocked by SRP - at least in
P2. --- Steve

http://www.microsoft.com/technet/pro.../rstrplcy.mspx

"Mike" <Mike@discussions.microsoft.com> wrote in message
news:B80EC2F3-BD07-4088-81FC-E25548CA52BD@microsoft.com...
> We have to allows the users of our systems to be Administrators in order
> for
> our programs to work properly. With this being the case, is there a way
> or
> is there a program or utility that will keep programs from being installed
> even though the users had Administrative priveledges?
>
> Thanks
>

Steven

Thanks so much. We'll give this a try and psot our findings.

Thanks again for the quick response.

Mike

"Steven L Umbach" wrote:

> That is a tall order but you can use Software Restriction Policies and
> configure enforcement to include local administrators. I suggest that you
> configure it under computer configuration. Beware that any local
> administrator however can boot into safe mode to bypass SRP and of course a
> local administrator can also unjoin the computer from the domain. The link
> below explains more and realize the shortcuts by default are included in the
> list of extensions that can be blocked. Make use of the application log on
> the computer if you are having trouble tweaking the SRP settings as an event
> will be recorded when an application is blocked by SRP - at least in
> P2. --- Steve
>
> http://www.microsoft.com/technet/pro.../rstrplcy.mspx
>
> "Mike" <Mike@discussions.microsoft.com> wrote in message
> news:B80EC2F3-BD07-4088-81FC-E25548CA52BD@microsoft.com...
> > We have to allows the users of our systems to be Administrators in order
> > for
> > our programs to work properly. With this being the case, is there a way
> > or
> > is there a program or utility that will keep programs from being installed
> > even though the users had Administrative priveledges?
> >
> > Thanks
> >
>
>
>