How to - XP User rights via Administrative tools

Hey,

I have ran into a problem at work - one of my colleagues work on XP with Admin rights (cant change it to just user due to what he does). Now he is a ******* and has downloaded and installed lots of p2p soft that keeps pumpin' the viruses and spreading them via intranet. Is there a way to restrict his as admins rights to install soft? Theoretically there should be an option even for the Admin to restrict the rights to install. If for instance smth needs to be installed, then one would just enable the function and it would do the job. Or maybe I could just enter the software names that would be restricted... like create a filter.

Any thoughts // help on this will be appreciated!

Thanks in advance.

 

Is your colleague good with computers? What does he do? (which folder does he have to have access to?) Does he use specific programs? Which ones?

 

He does Video editing, works with sound, so installs and removes video plugins; browses web for various solutions in video editing. He uses liquid 7 for video editing; soundforge for audio, and photoshop + after fx. He wants to use the p2p (emule; some kind of lime soft - although I am not sure about the name of this one) or that kind of soft for music and plugins - which my department prohibits to do. Just as I delete that soft, he brings it back in... He needs the admin rights as the editing soft only runs that way. The guy is good with computers but I would call him evil as he does not respect the one he works on officially. I know his home pcs work just fine.
So basically I want to ban him from using the downloading soft and installing privilege. Maybe I could close certain ports... but which ones?

Thanks for the reply Btw.

 

All of them. If he continues to not abide by the rules then permissions must be severely restricted.

Sounds like a reckless downloader which easily invites worse things to come (trojans/virii/malware/etc) that could spread throughout the network. If that happens your head would be on the stake.

 

Thats why I am here! Here's the funny story - today the internet and the intranet went down - we could hardly load the local news sites... files via local network were moving slow. We ran a scan and guess what - traces led to his computer. After a virus and spy ware scan I found 1500 infections of at least ~20 different viruses and trojans that were completely killing the whole net. That was the last drop... So that's why I am looking for advise. Computers are full of viruses, but those can be treated, hence when a person becomes a computer virus - haven't yet figured out what to do XD

 

Hehe, with the latest info obviously not!

He can't be trusted and should not have access to the net, period.

If there is some kind of software that is needed then he can ask permission for it to be installed by someone else in charge. Maybe you can modify the group policy rules (group policy editor).

 

I guess that's what will be done - the ports will be closed and hopefully we will sustain order in the network. :major

Well, then, thanks for the attention! :wave
Cheers!

 

Tie the "human virus carrier"'s arms behind his back and make him type with his nose. Won't stop him, but it'll slow him down...

Good luck.