To lock add or remove program

Hi,
Is there is any way to lock 'add or remove program' so only admin can able
to download software.I dont like to create guest account,please tell me if
there is any way other.

It will good whenever any user tries to download program or run from
internet it should ask password so that only admin can able to download.

Please let me know if there is any option to do

Thanks inadvance

Administering an XP Pro Edition system to deny rights requires TWO admin
accounts.

One account can use Add/Remove, but cannot edit Policy. The other account
can edit Policy, but cannot not use Add/Remove (or other Policy denials).

You cause an admin account to not be able to 'edit' Policy (or have it
applied to it) by changing the Permissions on the ../GroupPolicy/ folder to
deny READ access for that admin.

You set Policy for using Add/Remove in 'GPEdit.MSC' (Not available in Home
Edition)

If you do all this, and then reset to default Security settings, you will
lose access to Add/Remove completely (until you again deny read access to
the /grouppolicy folder to lift the Policy)

In Home edition, Limited users cannot add/remove.
--
click the Ratings button. Voting helps the web interface.
http://www.microsoft.com/wn3/locales...help_en-us.htm see ''rate a post''
Mark L. Ferguson

"Suresh" <Suresh@discussions.microsoft.com> wrote in message
news:7704D5E5-2831-4112-94D6-749405FAAA70@microsoft.com...
> Hi,
> Is there is any way to lock 'add or remove program' so only admin can able
> to download software.I dont like to create guest account,please tell me if
> there is any way other.
>
> It will good whenever any user tries to download program or run from
> internet it should ask password so that only admin can able to download.
>
> Please let me know if there is any option to do
>
> Thanks inadvance

If you have administrative privileges you can change the permissions on
any or all the files and folders on the machine, you cannot lock down a
machine for administrative users, if they are clever enough they will
figure out what is going on.

John

Mark L. Ferguson wrote:

> Administering an XP Pro Edition system to deny rights requires TWO admin
> accounts.
>
> One account can use Add/Remove, but cannot edit Policy. The other
> account can edit Policy, but cannot not use Add/Remove (or other Policy
> denials).
>
> You cause an admin account to not be able to 'edit' Policy (or have it
> applied to it) by changing the Permissions on the ../GroupPolicy/ folder
> to deny READ access for that admin.
>
> You set Policy for using Add/Remove in 'GPEdit.MSC' (Not available in
> Home Edition)
>
> If you do all this, and then reset to default Security settings, you
> will lose access to Add/Remove completely (until you again deny read
> access to the /grouppolicy folder to lift the Policy)
>
> In Home edition, Limited users cannot add/remove.

Hai Mark,

Thanks for your reply.It will be nice if you explain step by step procedure
to do this process because i am not much aware of this concept.please advice
me regarding this.Thanks in advance

"Mark L. Ferguson" wrote:

> Administering an XP Pro Edition system to deny rights requires TWO admin
> accounts.
>
> One account can use Add/Remove, but cannot edit Policy. The other account
> can edit Policy, but cannot not use Add/Remove (or other Policy denials).
>
> You cause an admin account to not be able to 'edit' Policy (or have it
> applied to it) by changing the Permissions on the ../GroupPolicy/ folder to
> deny READ access for that admin.
>
> You set Policy for using Add/Remove in 'GPEdit.MSC' (Not available in Home
> Edition)
>
> If you do all this, and then reset to default Security settings, you will
> lose access to Add/Remove completely (until you again deny read access to
> the /grouppolicy folder to lift the Policy)
>
> In Home edition, Limited users cannot add/remove.
> --
> click the Ratings button. Voting helps the web interface.
> http://www.microsoft.com/wn3/locales...help_en-us.htm see ''rate a post''
> Mark L. Ferguson
>
> "Suresh" <Suresh@discussions.microsoft.com> wrote in message
> news:7704D5E5-2831-4112-94D6-749405FAAA70@microsoft.com...
> > Hi,
> > Is there is any way to lock 'add or remove program' so only admin can able
> > to download software.I dont like to create guest account,please tell me if
> > there is any way other.
> >
> > It will good whenever any user tries to download program or run from
> > internet it should ask password so that only admin can able to download.
> >
> > Please let me know if there is any option to do
> >
> > Thanks inadvance
>

Administration is not really a 'step-by-step' sort of business. You either
want to learn how, or you don't. You will have to look at the tools, and
read the help to either acquire the skill, or get someone else to do that.
--

Mark L. Ferguson

"Suresh" <Suresh@discussions.microsoft.com> wrote in message
news:349E20DA-7ACB-4532-9178-51DD04E21819@microsoft.com...
> Hai Mark,
>
> Thanks for your reply.It will be nice if you explain step by step
> procedure
> to do this process because i am not much aware of this concept.please
> advice
> me regarding this.Thanks in advance
>
> "Mark L. Ferguson" wrote:
>
>> Administering an XP Pro Edition system to deny rights requires TWO admin
>> accounts.
>>
>> One account can use Add/Remove, but cannot edit Policy. The other account
>> can edit Policy, but cannot not use Add/Remove (or other Policy denials).
>>
>> You cause an admin account to not be able to 'edit' Policy (or have it
>> applied to it) by changing the Permissions on the ../GroupPolicy/ folder
>> to
>> deny READ access for that admin.
>>
>> You set Policy for using Add/Remove in 'GPEdit.MSC' (Not available in
>> Home
>> Edition)
>>
>> If you do all this, and then reset to default Security settings, you will
>> lose access to Add/Remove completely (until you again deny read access to
>> the /grouppolicy folder to lift the Policy)
>>
>> In Home edition, Limited users cannot add/remove.
>> --
>> click the Ratings button. Voting helps the web interface.
>> http://www.microsoft.com/wn3/locales...help_en-us.htm see ''rate a
>> post''
>> Mark L. Ferguson
>>
>> "Suresh" <Suresh@discussions.microsoft.com> wrote in message
>> news:7704D5E5-2831-4112-94D6-749405FAAA70@microsoft.com...
>> > Hi,
>> > Is there is any way to lock 'add or remove program' so only admin can
>> > able
>> > to download software.I dont like to create guest account,please tell me
>> > if
>> > there is any way other.
>> >
>> > It will good whenever any user tries to download program or run from
>> > internet it should ask password so that only admin can able to
>> > download.
>> >
>> > Please let me know if there is any option to do
>> >
>> > Thanks inadvance
>>