No announcement yet.

How to control users software installation

  • Filter
  • Time
  • Show
Clear All
new posts

  • How to control users software installation

    Dear All,

    We are and IT company and offering services to one of ministry. Our corporate setup is based in Windows 2008 R2 DC and Win 7 pro clients.

    We have IT operations team and also developers and they do require a lot of testing of new products and find new ways to offer improved services from our data center. All those technical staff are added to 'Administrators' group on their PC's means they have full rights to install what they want.

    But after all this we still want to have kind of control to check if any pirated softwares is in use on computers and allow certain set of defined softwares.

    Is there a way possible to have control on this through GPO? OR this is not possible and requires additional third party tools to get this done. Really appreciate suggestions on this, what can be done for this.

    Any more details if needed let me know.


  • #2
    Re: How to control users software installation

    If you are Win7 Enterprise (not Pro) you could look into AppLocker, which gives you very fine grained control over what can be installed/run. You would need some way of distinguishing your developers apps from commercial ones, such as digital signatures.

    Alternatively, use inventory tools such as SCCM and check the reports regularly.
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    IT Trainer / Consultant
    Ossian Ltd

    ** Remember to give credit where credit is due and leave reputation points where appropriate **