Another commercial option may be Appsense Application Manager. You can lock down applications on a user group basis from memory. > You can also lock down the permissions in the registry for HKLM/software. > > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On > Behalf Of Frank Monroe > Sent: Thursday September 09, 2004 8:01 AM > To: 'thin@xxxxxxxxxxxxx' > Subject: [THIN] Re: Users installing programs > > Are these servers NT4 or Windows 2000/2003?. If they are 2000 or above, > go into terminal services configuration and change your permission > compatibility mode to Full Security. This will stop them from installing > programs. You may have to tweak some registry key's security for some > existing programs so that they continue to work. But fixing that is > trivial if you use regmon. > -----Original Message----- > From: Jim Abshire [mailto:Jim.Abshire@xxxxxxxxxxx] > Sent: Wednesday, September 08, 2004 3:54 PM > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Users installing programs > I have a question, I work for a property management company and we > provide Internet via Citrix to students. I have tried desperately to lock > down the servers but they seem to still be able to install Internet based > programs, (e.g. AOL instant messenger, Poker Party, etc) to name a few. > Is there a way to lock the server down tight so this cannot continue > without prohibiting the users to run necessary programs such as Office? > > Jim Abshire > Network Administrator > Dinerstein Management > 713-570-0373 > > ---SECURITY DISCLAIMER--- This information including any attachments may > contain legally privileged and/or highly confidential information. If you > are not the intended recipient(s), or the employee responsible for > delivery of this message to the intended recipient(s), you are hereby > notified that any dissemination, distribution or copying of this > communication and or attachments is strictly prohibited under State and > Federal Laws. If you have received this communication in error, please > immediately notify the sender and follow appropriate actions for disposal. > ******************************************************** This Weeks Sponsor triCerat: Have you had your fill of printing support calls, unauthorized apps running on unsecured Terminal Servers, profile headaches, and application performance problems? Join us and learn how you can have a less demanding on-demand enterprise! http://www.tricerat.com/?page=events#register ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm