On Tue, 14 Sep 2004 11:39:04 -0700, "ntelscho"
<ntelscho@discussions.microsoft.com> wrote:

>I'm looking for information on setting that can be made to prevent users from
>having spyware installed on their machines using 2000. The main problem is
>that all the users need to have administrative access for some of their
>applications to work. Are there some settings that I can change in IE or
>elsewhere that would at least help prevent this for most users? Any
>suggestions on how I can lock down a system without revoking admin
>priveledges?

You really can't. It's either locked down or the user has local admin
rights. You may be able to tweak the rights and find they don't need
admin if they have appropriate access, but that depends on the
application.

Otherwise, products like Adaware installed on each system are about
your next best choice.

Jeff