Prevent the use of portable software on non-admin accounts

Question

Is it possible to disable the use of portable applications on non-administrator accounts? I am the administrator on a Windows XP machine, and I do not want limited users to be able to run portable applications - especially web browsers.

Can this be done?

Answer 1

You will want to take a look at the Software Restrictions Policies on your system. You can find out more from Microsoft KB310791: Description of the Software Restriction Policies in Windows XP.

WindowsNetworking.com has an article, Using Software Restriction Policies To Keep Games Off Of Your Network, that provides some concrete examples of how to use the restrictions.

If the users are launching the software from USB drives, you can prevent users from connecting to the USB devices by following Microsoft KB823732: How can I prevent users from connecting to a USB storage device?

Answer 2

Well, I don't know if you are ironic or what, but with that attitude, you will only create complete anarchy.

If I would come to a machine where I wouldn't even be able to use my own favourite applications if they are not installed, then a reset of the BIOS and reboot of a favourite OS would be the only reasonable.

I am currently trying to teach in the most locked environment I've ever seen, a so called IT-environment based upon Windows Vista (and only...) where the only way to run any course at all is due to portable apps. I wasn't even able to connect my own server, I can not put programs on the common area (.com .exe .bat not allowed...), I can not share my USB or home catalog.

The only way to distribute software is to carry around USB-memories, or let the students install the necessary software themselves. OK, it's not really "install" when it's about portable software.

A sysadmin that reasons like you, is an enemy to mankind.