We help IT Professionals succeed at work.

Prevent Non-admin user from installing software

Medium Priority
Last Modified: 2010-04-21
I have a Windows Server 2003 AD environment with all XP Pro SP2 computers. No users other than admins have local power user or admin rights. They are only members of the users group. There are some pieces of software that users can download from the web that install without admin or power user priviledges. For example, a user was able to install Power Point Viewer with no admin rights. Is there a Group Policy to prevent installation of software that does not need admin rights to install? Software Restriction GPO produces too much administrative overhead for their part time IT person. I just need to know if this is possible without purchasing a third party application.

I have searched EE database and seem to only find solutions for people that gave their users local admin rights and just needed to remove them from those group.
Watch Question

Awarded 2007
Top Expert 2008
The only built in tool is a software restriction GPO which you seem to have already ruled out - It really isn't that bad - any 3rd party tool is also going to require some time spent on it.
Some web-based installers user Active-X to run them.  You could, again through a GPO, restrict their ability to run Active-X applications.


Not really what I was looking for...


I realize what GPO's can do. Was looking for another solution.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.