Network Solution for Windows – Windows system, Linux system, Ubuntu server configuration tip

In Win XP Pro, does anyone know how to set a software or security policy that will have the effect of totally halting any and all software installation (unless first reversing said policy), including Internet downloads, shell extensions and the like?

Even as careful as I am and occasionally I’ll download more than I bargained for. Last time it happened I ended up formatting and reinstalling. I looked around in the group policy editor, but only found items such as (a) disabling installs from removable media, or (b) disabling Windows Installer. If they were both invoked, that would not stop installing a little Internet program such as WinAmp or Yahoo Messenger…

1. If you’re using IE as your browser just go Tools> Internet Options> Security Settings> Internet> Custom Level> and scroll down to the File Download entry and disable it.
2. The way to do this is to use Group Policy. Bring up the Run command box and type ‘gpedit.msc’ and hit Enter.
   Look under “Computer Configuration\Administrative Templates\Windows Components\Windows Installer”…
   ->double-click on “Prohibit User Installs”
   ->choose “Enabled”
   ->Select “Prohibit User Installs” from the drop-down box.