hi, i have a questions that how can i prevent power users group intall software. as you know, the default permission for power users group are allowed to install some program like QQ, winrar, skype, yodao online directory. is there any way that i can block the users' behavior to install such software. thanks,charles

Hello, AFAIK, there is no way to prevent such group from installing. Just let your users members of groups you want other than administrator/power users group depending of your need. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

hi, mr. x thanks for your reply. i will try software ristriction policy again. maybe"HASH" rule can prevent users from running qq or msn. hope i am lucky. regards,charles

Hi, You may also consider using the AppLocker. The following link for your reference. http://technet.microsoft.com/en-us/library/dd548340(WS.10).aspx Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.