Active Directory Help needed to block some things. 1

[NetAdmin2004]

Here are two things I am trying to prevent on a user level:

1) Disable IE for 2 users in thier own OU

2) Disable the ability to install software for the above users


I tried the bogus proxy settings, but it modified the PC not just the user accounts so other users couldn't use the internet also who need it. I need it on a user level because these yahoos' logon to 2 PCs not just one or it would be simple..... I am also trying to prevent them installing software apps like MSN messenger etc....

Thanks for the help!

 

[markdmac]

#1 is easy. Create a new GPO for these users. Add iexplore.exe to the list of Don't Run Specified Windows Applications.

You will find this in the GPO under User Configuration/Administrative Templates/System.

#2 is also esy. make the users members fo the local USERS group. If they don't have power user rights or higher they can't install software.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark