Announcement

Collapse
No announcement yet.

Prevent install programs

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Prevent install programs

    hi!
    How can i prevent insll programs (*.exe) by users Groups in domain. e.g Download Manager that run and install without admin permission

  • #2
    Re: Prevent install programs

    hi,
    there are various ways to stop users from installing programs on network. If you want to restrict all users in domain. use domain group policy or if you want to implement on OU, use ou group policy. If you don't got AD environment or you just want to strict only one or two pc you can do it via security tempelate.
    From group policy editor, click the Windows Installer node.

    applicable policy name
    --User Configuration
    ---Administrative Templates
    ---Windows Components
    -----------Windows Installer
    In the details window, double-click one of the following policy settings:
    Always install with elevated privileges
    Search order
    Prohibit rollback
    Prevent removable media source for any install
    In the Group Policy Property dialog box, set the options you want to use, and then click OK

    If you don't want to use group policy, i think disabling Windows insataller service in services tab would also prevent users to install application programs
    regards

    Comment


    • #3
      Re: Prevent install programs

      hi,
      there are various ways to stop users from installing programs on network. If you want to restrict all users in domain. use domain group policy or if you want to implement on OU, use ou group policy. If you don't got AD environment or you just want to strict only one or two pc you can do it via security tempelate.
      From group policy editor, click the Windows Installer node.

      applicable policy name
      --User Configuration
      ---Administrative Templates
      ---Windows Components
      -----------Windows Installer
      In the details window, double-click one of the following policy settings:
      Always install with elevated privileges
      Search order
      Prohibit rollback
      Prevent removable media source for any install
      In the Group Policy Property dialog box, set the options you want to use, and then click OK

      If you don't want to use group policy, i think disabling Windows insataller service in services tab would also prevent users to install application programs

      regards

      Comment


      • #4
        Re: Prevent install programs

        You can't prevent them from instaling EXE files, but you can prevent them from running EXE files. You must make exclusion from this because, if you DISALLOW EXE files, you won't be able to run any programs (IE, WMPlayer...)


        You should user SOFTWARE RESTRICTION POLICIES under COMPUTER CONFIGURATION, WINDOWS SETTINGS, SECURITY SETTINGS and make use of one of the rules. Create appropriate GPO and link it to OU where is located only targeted group.


        Or you can prevent them from instaling EXE files (prevent them from installing anything acctually).
        By default, USERS group in domain don't have right to install anything....
        Last edited by kojo1984; 10th June 2007, 15:49.

        Comment


        • #5
          Re: Prevent install programs

          its right for all programs, but not about DAP(idman.exe), this program run without admin permission
          Last edited by sharareh; 16th June 2007, 06:04.

          Comment

          Working...
          X