<div>
You can take everyone out of power users and administrators group and put them in just users.
</div>


<div>
unfortunately, need them as local admin for 1 piece of badly written software that requires it....
</div>


<div>
You should be able to use a group policy assuming you are using server:<br />
<br />
<a href="http://technet.microsoft.com/en-us/library/bb457006.aspx" rel="ugc">http://technet.microsoft.com/en-us/library/bb457006.aspx</a>
</div>


<div>
looking for a solution in SEP 11
</div>


<div>
SEP 11 isn't designed for what you are trying to do. It has no control over whether a user can install applications. It will block certain malware but it's not going to stop you from installing Office or Acrobat or something like that. 
</div>


<div>
<div class="content wysiwyg-content">
I am looking for a way to block the installation of software that is inniated from the internet. &nbsp;Specifically to block the install of malware and spyware like Antivirus 2009. &nbsp; &nbsp;If I could just block ALL software installs on my users workstation, then I can prevent any one from accidently loading un-approved software. &nbsp; I could then disable this when we want to do windows updates or approved software installs.
</div>
</div>


I am looking for a way to block the installation of software that is inniated from the internet.  Specifically to block the install of malware and spyware like Antivirus 2009.    If I could just block ALL software installs on my users workstation, then I can prevent any one from accidently loading un-approved software.   I could then disable this when we want to do windows updates or approved software installs.

How to configure Symantec Endpoint Protection 11.0 to block all workstation software installs

Anti-virus software was originally developed to detect and remove computer viruses. However, with the proliferation of other kinds of malware, antivirus software started to provide protection from other computer threats. In particular, modern antivirus software can protect from malicious browser helper objects (BHOs), browser hijackers, ransomware, keyloggers, backdoors, rootkits, trojan horses, worms, malicious layered service providers (LSPs), dialers, fraud tools, adware and spyware. Some products also include protection from other computer threats, such as infected and malicious URLs, spam, scam and phishing attacks, online identity theft (privacy), online banking attacks, social engineering techniques, Advanced Persistent Threat (APT), botnets and DDoS attacks.

Anti-Virus Apps

Microsoft Windows XP is the sixth release of the NT series of operating systems, and was the first to be marketed in a variety of editions: XP Home and XP Professional, designed for business and power users. The advanced features in XP Professional are generally disabled in Home Edition, but are there and can be activated. There were two 64-bit editions, an embedded edition and a tablet edition.

Windows XP

Spyware is software that aims to gather information about a person or organization without their knowledge and that may send such information to another entity without the consumer's consent, or that asserts control over a computer without the consumer's knowledge; it has also come to include programs that engage in various kinds of electronic fraud. Anti-spyware is software that removes or blocks that software; some common vendors include Malwarebytes, McAfee, Spybot-Search and Destroy, Ad-Aware and BitDefender.