Posted 23 January 2009 - 01:51 PM
I have used this forum to find several answers to my ailments over the last few years and today I have finally been completely beaten by an issue that I could not possibly find the answer to anywhere. In my situation we are attempting to demote all users from local Admins on their machines to power users and remove their ability to install software. I am aware that this is the bass ackwards way of creating a secure windows environment but this is currently what our situation calls for. I have researched editing the local GPO on each system, editing the registry, and creating/editing permissions on folders/reg keys. None of the suggested actions I have found have solved the issue. Can anyone tell me a solution that they have found that works for this particular situation? All workstations are running XP PRO and are members of a Domain with appropriate user restrictions for the network so this is only a matter of securing the local machine. Please let me know if more information is needed and thanks to all those who even look at this post.