[Question] - Software restriction as a GP

[Vitalix]

Hey guys and gals,

Is there a setting in the AD GPO (or even local security policy) where I can permit a list of software that can run in administrator mode? We are trying to get a font server which requires admin rights on the desktop. The problem is that we do not want the users to have admin rights to install software or have other fun-with-admin type things.

Can we set a list of software that can run as an adminsitrator on the machine, but not have the user account as an adminsitrator?

Thanks in advance as always!

Title Edited - Please follow new posting rules from now on.

--Zxian