hi,
i'm currently running server 2008 R2 as a domain and file server with a win7 forest and maybe one xp pc
today i'm looking for a way to block people from installing new programs it can be either they are 100% blocked from doing this or they can only update the programs
i was hoping to do this with the GPO and only do it through users, so that when domain admins login they can easerly do updates and install things
is this possible ?