Discussion Locked

Prevent programs being installed

0 helpful
12 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Is there a quick and efficient way to prevent any software being installed on a pc? I know there are utilities/programs which allow only those ALREADY installed and authorised. I'm approaching this from the OTHER side of the story: to prevent any new installations of programs after I have installed those needed and authorised.

Any comments?

12 replies

by beetstein

I have read on a few websites that the following is supposed to work:

HKey_Current_User\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

and change the string value of 'PromptRunasInstallNetpaht' to '1' or create it if necessary.Still I do not get any prevention.

by madroxxx

If your operating system is NT/2000 you should be able to prevent them from installing by not giving them the rights.

by admin

They can install them, but it all disappears as soon as they are finished and returns exactly to the way you installed those needed and authorized programs before they got to it as soon as it reboots. They give up soon :)

by bklein

Seriously, yank the optical media drives (CD-ROM - R/RW, etc.) out of the machines. If you don't have the bay cover to snap into the front bezel, duct tape works great (preferably bright red).

This, combined with an OS switch to whatever versionof NT or *gasp* Linux, could completely eliminate the problem. But let's assume your bean counters would equate an OS switch to killing a fly with a baseball bat. Still, without the optical drives, the users would only be able to install from floppies (rarely an option from software vendors these days) or whatever silly shareware/freeware/trialware crap they happen to download from the net. Then, with the right firewall/proxy set-up, the *.zip and *.exe files could easily be blocked.

Last but not least, you should have an "acceptable use" policy which explicitly makes installing unauthorized software a no-no.

Good luck!

by darrellblackhawk

I tried this once on a totally win98 network once. (Many hours of fun and frustration...)

Set registry settings up the yazoo and got myself into quite a tizzy. It worked! Imagine that!

Unfortunately, I don't remember how I did it. Boo Hoo. I went to NT at that point.

Try and fart around on a lone w98 box. Read the policy and group editor notes on MS's site and on your Win 98 CD - and might I add blow up the machine.

I also was able to set a password that only allowed me access to the critical configuration that allowed software installations.

Then it blew up.

So to make a long story longer... Good luck!

I did try some things like deepfreeze, but I don't remember if they allowed incremental changes to system files. Probably not... Worth a try...

by dennis

Check out www.valtx.com. The Storage Firewall is a hardware device which is installed between the hard drive and mainboard. It is the only impenetrable technology that automatically and instantly erases all unauthorized changes including programs, viruses and spyware. Other technologies such as Deep Freeze, Hard Drive Sheriff etc are easily wiped out by low level attacks. The Storage Firewall is hardware only and OS independent - there is no vulnerable software component. If you would like to try one out contact me and I will arrange a free trial. Several colleges and Universities have implemented the Storage Firewall.

by djent

The simple answer to your question is no. Quit trying to beat square pegs into round holes, upgrade the OS to a version that was designed to handle your task.

This discussion is closed to new replies.