Announcement

Collapse
No announcement yet.

Set policy to prevent software install except win7 updates

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Set policy to prevent software install except win7 updates

    Good day ladies and gentlemen

    I am installing a new win7 pc on a domain and would like to do the following

    Prevent the user from installing any software but still allow the windows7 from installing its own software updates(and office updates)

    I do not want to use group policy form the server but rather change the local policy on that 1 pc only.

    Where can I find that policy and what value must be set?

    thank you

  • #2
    Re: Set policy to prevent software install except win7 updates

    Remove the user from Local Admin and Power User groups should do the trick
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Set policy to prevent software install except win7 updates

      you could also look at SecPol.msc, which is the local security policy. it has similar options to group policy, but is not as powerful.

      Also, due to GPO heirarchy, if you have a group policy within the domain, it will overwrite the local security..
      Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

      Comment

      Working...
      X