deny users s/w install rights on stand-alone WinXP

Posted on 2004-09-04
Last Modified: 2012-05-09
I have some users that I want to make sure can not install software on Windows XP from their user (not Admin) accounts.

I have denied access to the Add/Remove .cpl but that does not stop them from being able to install apps using self-installer setups.

I would be happy to do this using either the registry or group policy.


Question by:wheels4me
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 10

Assisted Solution

dis1931 earned 50 total points
ID: 11983301
Denying access to add/remove doesn't do much other than stop them from using add/remove for installing apps which most people don't even use in the first place....making a user part of the user group in general prevents installation of applications.


Assisted Solution

raybass earned 50 total points
ID: 11983376
All applications (well, 99% or so) have to use the Windows Installer to install themselves.  Just disable the Windows Installer service in the Services part of computer management.  Any time you need to install something just re-enable it.

Start->Control Panel->Administrative Tools->Services, double click "Windows Installer," change start state from "Manual" to "Disable".  Viola.  This can also be done with group policy, but probably not worth the search to find it in there...  Something about "Disable windows installer" under computer configuration.

Good luck!

Accepted Solution

Worked4me earned 150 total points
ID: 11983816

  Yes you can use the GP it's in Computer Configuration, Administrative Templates, Windows Components,
  Windows Installer, Disable Windows Installer, and Prohibit User Installs

  Good Luck
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 11986218
Thanks people!  Those are great answers.  I had spent some time looking at GPedit and yet missed the Windows installer part.  

Run Gpedit 3-4 mouse clicks later and I had exactly what I wanted.

The other two answers got points for being good and timely, but the GP answer is really the one I wanted.

Much faster and better here than the microsoft.windowsxp newsgroup where the guy did not even read the question and used RTFM in his signature.


Expert Comment

ID: 11986636
There's a manual for windows xp?
LVL 10

Expert Comment

ID: 11986719
i think microsoft calls it that is just a guess...LOL

Expert Comment

ID: 11986834

  Glad to help wheels4me..

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

742 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question