They can still run no-install-needed software and software that installs itself into the user profile e.g. Chrome.
The answers to the original question are any or all of the following. a) use a gateway or proxy server that blocks the unwanted downloads. b) use WSUS to distribute Microsoft updates. c) use software restriction policies to white-list allowed software Carl From: Mike Sullivan [mailto:neog...@gmail.com] Sent: Tuesday, November 30, 2010 12:19 AM To: NT System Admin Issues Subject: Re: Blocking files from being downloaded If they can't install it, what good is downloading it then? On Mon, Nov 29, 2010 at 9:05 PM, Juned Shaikh <jsha...@gmail.com> wrote: How does taking admin rights away stops them to "download" softwares from i.e. Softpedia? -- Mike Sullivan neog...@gmail.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin