Question : Disable Software installtions through Group Policy?

Is there a way, through group policy (or something similar) to stop users from installing software on their desktops?

TIA.

-M

Answer : Disable Software installtions through Group Policy?

When (if) you want to remove them all from the Local Admin group, you can achieve this in one fell swoop! You don't need to visit all the machines: or at least the W2k/XP PCs!
Use Group Policy (you have got a W2k domain, right?) to enforce a Security Template. First customise this template by adding entries to the Restricted Groups (see: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/server/SCE_res_group.asp) which define the [Local] Administrators group as having Domain Admins and [Local] Administrator as the only members.

You can test this by putting a few machines into a test OU, then apply the policy to it. Bear in mind that policy refreshes every 90 minutes or so, unless you force it with "secedit /refreshpolicy machine_policy"

Good Luck,
Roly Dee