3 replies
by ajk_gpt9 Accepted solution
by dryflies Accepted solution
I am not sure if you can disallow a user from installing *any* software but you do have some options.
make the user a restricted account. make sure they are not amember of the administrative group for that computer or the domain. if there are particular applications you wish to restrict, create a software restriction policy that will disallow that software. you can find all this in either the local security policy if you are using workgroups or under group policy on your domain controller if you have one of those.
by why me worry? Accepted solution
If this is a standalone machine, you will have to use local policy editor to prevent installation of applications through the Windows installer, which would prevent MSI packages from running. If the machine is joined to a domain, you would have to apply a GPO to the domain, OU, or site level to apply software restriction policies.
Also, make sure the user is not a member of the local admins or power users group, as this would prevent installation of software.
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending