Hang on a minute... GPO stuff will help with things that go by the installer route. Which is just peachy if everything did. But it doesn't... The fact remains, if they have no access to write to the terminal server, they can't install programs on the terminal server. So they shouldn't have elevated *rights* on the server (ie not part of Power Users, or local Admins), and there should be restrictive permissions on the aspects of the server where software will leave it's mark - ie HKLM hive of the registry, and the local NTFS drives of the server. If they can't write to HKLM, and they can't write to the local server drives, they can't install software there. Neil > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx > [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Abshire > Sent: 08 September 2004 22:46 > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Re: Users installing programs > > I have searched the GPO but cannot find either of these > policies, is there a specific .adm I need to load? *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ ******************************************************** This Weeks Sponsor triCerat: Have you had your fill of printing support calls, unauthorized apps running on unsecured Terminal Servers, profile headaches, and application performance problems? Join us and learn how you can have a less demanding on-demand enterprise! http://www.tricerat.com/?page=events#register ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm