GPO

Is there a GPO so users cannot install software, even if there are local administrators
aardmancgiAsked:
Who is Participating?
 
LauraEHunterMVPCommented:
Software Restriction Policies can help, but only if you configure the restrictive "Only allow the software that I explicitly list here:" setting, which is difficult to administer/maintain on an ongoing basis: http://www.windowsnetworking.com/articles_tutorials/Software-Restriction-Policies.html
0
 
rhinocerosCommented:
As I know, It is impossible by GPO. Because local administrators are the top one in locally after logon.

0
 
LauraEHunterMVPCommented:
rhinoceros - Software Restriction Policies, when properly configured, will affect even local administrators of a given computer.  It's just a question of whether it's worth the time needed to test, deploy and maintain the kind of locked-down environment needed to do so.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.