[THIN] Re: Users installing programs

  • From: "Braebaum, Neil" <Neil.Braebaum@xxxxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 9 Sep 2004 09:30:14 +0100

Hang on a minute... GPO stuff will help with things that go by the
installer route.

Which is just peachy if everything did. But it doesn't...

The fact remains, if they have no access to write to the terminal
server, they can't install programs on the terminal server. So they
shouldn't have elevated *rights* on the server (ie not part of Power
Users, or local Admins), and there should be restrictive permissions on
the aspects of the server where software will leave it's mark - ie HKLM
hive of the registry, and the local NTFS drives of the server.

If they can't write to HKLM, and they can't write to the local server
drives, they can't install software there.

Neil

> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx 
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Abshire
> Sent: 08 September 2004 22:46
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Users installing programs
> 
>  I have searched the GPO but cannot find either of these 
> policies, is there a specific .adm I need to load?

***********************************************
This e-mail and its attachments are confidential
and are intended for the above named recipient
only. If this has come to you in error, please 
notify the sender immediately and delete this 
e-mail from your system.
You must take no action based on this, nor must 
you copy or disclose it or any part of its contents 
to any person or organisation.
Statements and opinions contained in this email may 
not necessarily represent those of Littlewoods.
Please note that e-mail communications may be monitored.
The registered office of Littlewoods Limited and its
subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB.
Registered number of Littlewoods Limited is 262152.
************************************************

********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running on 
unsecured Terminal Servers, profile headaches, and application performance 
problems? Join us and learn how you can have a less demanding on-demand 
enterprise!
http://www.tricerat.com/?page=events#register 
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: