Restriction policies are set up to help ensure the safety of the client and server computers.
Administrators should be the only users that install programs on computers. This is not the case sometimes. Certain users have administrative rights, which means they can make changes to the computer just as the administrator can. Software restriction policies help ensure that the programs installed on a computer will not cause damage.
Types
Windows XP has two primary polices for "Software Restriction." The first one is "Disallowed." This policy prevents any programs from being installed on the computer at all -- unless you have allowed specified programs. The second option is "Unrestricted." This option allows a user with sufficient authority to install any program that they normally have rights to install.
Function
Windows XP Software Restriction Policies prevent users from installing programs that could either damage the computer or allow other programs to be installed that would damage or compromise the computer.
Managing Policies
If you choose to disallow users to install programs, you should already have a predetermined list of programs that they need and install them prior to enforcing the restriction policy. Most administrators do not use the restriction policies because they are always adding and changing programs as the users' needs change.
Tags: help ensure, install programs, installed computer, policies help, policies help ensure