[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Group Policy Software Install Lockdown

Posted on 2009-02-24
9
Medium Priority
?
544 Views
Last Modified: 2012-06-21
Hi, I am in the process of trying to stop users on XP and Vista, from installing unauthorised applications on their PC's. They all connected to Domain on win 2003 server. Most articles I have read start by removing user from the Local Administrators group. This is fine and works for stopping most install attempts.
I have noticed that with this set users cannot manually run Windows updates. Is there a way around this?
0
Comment
Question by:CSE-User
  • 5
  • 4
9 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23722497
Make the setting below circled in red
xp-group-policy.jpg
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23722514
Note:
 
Make this in group policy, not local>>>was just a quick screenshot
0
 

Author Comment

by:CSE-User
ID: 23722645
Hi thanks for the fast response.... Yeah I saw those settings and have them applied. Auto updates are comming down and install when the machine is switched off.
What I would like to get around though is for th user to be able to :-
Start -> All Programs -> Windows Update.
This results in the web browser telling you that you need to be an administrator. I was wondering if that could be "worked around".
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23722768
have you tried?
 
User config>>>admin templates>>>start menu and task bar>>>remove links and access to windows update
0
 

Author Comment

by:CSE-User
ID: 23722798
Sorry maybe I was unclear with the request. I would like them to be able to use Windows updates, but they cannot.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23722957
Why would you trust your users to have download and install thier own updates? I would advise against this and set it up to download and install automatically.
0
 

Author Comment

by:CSE-User
ID: 23723291
You have a point........ So if I configure Auto Updates in GP and apply the settings you suggested I should be done?
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 2000 total points
ID: 23723346
You dont need
 

"User config>>>admin templates>>>start menu and task bar>>>remove links and access to windows update"
 
but the other setting yes, that way they can still get the yellow shield and install updates then.
0
 

Author Closing Comment

by:CSE-User
ID: 31550605
Thanx for the help "dstewartjr" very fast response and good info.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Loops Section Overview
Suggested Courses

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question