Add/Remove Programs (Group Policy) on local system

Posted on 2002-04-15
Last Modified: 2012-05-04
Our PC Administrator configured a local policy on every PC using the Group Policy Object: Local Computer.  This policy is at User Configuration/Administrative Templates/Control Panel/Add&Remove Programs, where he "enabled" -> "Disable Add/Remove Programs."

The problem is, with this setting even the Administrator can not add and remove programs unless he/she disables this Group Policy.  The Administrator will have to change this setting everytime.  What would be an easier way to set this up, so Administrators can perform Add/Remove programs without needing to change this Group Policy setting from enable to disable everytime?

Question by:bigfig
LVL 63

Expert Comment

ID: 6942696
Possibly, instead of Local Computer- this should be done for all Domain users. Local users should retain control.

I hope this helps !

Author Comment

ID: 6942738
>>Possibly, instead of Local Computer- this should be done for all Domain users. Local users should retain

- Putting the GPO at the domain level (in a non-AD config) would allow me as an Admin to install apps/programs and the domain users will be still disallowed this function?  I should note that this is a NT domain and not a W2K domain, if that makes any difference?

LVL 63

Expert Comment

ID: 6943778
I would test it with a single group, but yes, if you log on locally ( not to the Domain ), then you should retaind admin rights ( once you restore the correct rights for Local Computers ).

I hope this helps !
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

LVL 63

Accepted Solution

SysExpert earned 100 total points
ID: 6943780

Guide to Profiles and policy for NT. Group policy. Group profile mandatory


Expert Comment

ID: 7020134
23 open questions today.  ADMINISTRATION WILL BE CONTACTING YOU SHORTLY.  Moderators Computer101, Netminder, Mindphaser or I will return to finalize these as soon as possible if after 7 days no response by the Asker.  EXPERTS-->  please post closing recommendations before that time.

Below are your open questions as of today.  Questions which have been inactive for 21 days or longer are considered to be abandoned and for those, your options are:
1. Accept a Comment As Answer (use the button next to the Expert's name).
2. Close the question if the information was not useful to you, but may help others. You must tell the participants why you wish to do this, and allow for Expert response.  This choice will include a refund to you, and will move this question to our PAQ (Previously Asked Question) database.  If you found information outside this question thread, please add it.
3. Ask Community Support to help split points between participating experts, or just comment here with details and we'll respond with the process.
4. Delete the question (if it has no potential value for others).
   --> Post comments for expert of your intention to delete and why
   --> YOU CANNOT DELETE A QUESTION with comments; special handling by a Moderator is required.

For special handling needs, please post a zero point question in the link below and include the URL (question QID/link) that it regards with details.
Please click this link for Help Desk, Guidelines/Member Agreement and the Question/Answer process.

Click you Member Profile to view your question history and please keep them updated. If you are a KnowledgePro user, use the Power Search option to find them.  

Questions which are LOCKED with a Proposed Answer but do not help you, should be rejected with comments added.  When you grade the question less than an A, please comment as to why.  This helps all involved, as well as others who may access this item in the future.  PLEASE DO NOT AWARD POINTS TO ME.

To view your open questions, please click the following link(s) and keep them all current with updates.

To view your locked questions, please click the following link(s) and evaluate the proposed answer.

*****  E X P E R T S    P L E A S E  ******  Leave your closing recommendations.
If you are interested in the cleanup effort, please click this link 
------> POINTS FOR EXPERTS awaiting comments are listed in the links below (Part 1) (Part 2)
Moderators will finalize this question if in @7 days Asker has not responded.  This will be moved to the PAQ (Previously Asked Questions) at zero points, deleted or awarded.
Thanks everyone.
Moderator @ Experts Exchange

Expert Comment

ID: 12973182
I need to remove a 3rd party search bar (with smilies and all that) from quite a few machines on our network.  I can do this on each individual machine, but I wanted to know if there was a way to remove programs with GPO's.  I've worked with GPO's before but I haven't performed a mass software uninstall.  Is this possible and if so how?

Expert Comment

ID: 12973683
I forgot to tell you the we are using Windows Server 2000, and we are utilizing AD.  Is there a difference in the process using 2003?  (if there is a way to do what I'm attempting)

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Recreate New ADC 1 275
Video card with drivers for Windows 2000 8 146
Automate postgres backups on windows and move it to linux box 15 96
Windows 2000 48-bit LBA 13 19
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Do you use a spreadsheet like Microsoft's Excel?  Have you ever wanted to link out to a non excel file on your computer or network drive?  This is the way I found to do it!
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question