Solved

Software Installation Restrictions

Posted on 2010-09-09
4
507 Views
Last Modified: 2012-05-10
I'm embarrassed to even post this, but, I need to get this fixed.  On a terminal server, we had to put our domain users in the local administrators group.  As you can imagine, we had alot of concerns about doing this, especially when it came to software installation.  I used gpedit.msc on the box to put on a restrictions.  Since doing this, we remedied the problems that required domain users to have admin rights.  Now, I can not remember where that restriction is.  Could someone please remind me?
0
Comment
Question by:lalkacr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 33639940
Do the following...
- Open gpedit.msc on the server
- Expand>Computer Configuration>Windows Settings>Security Settings
- Expand Software Restrictions
- Edit the current policy you have here

Remove Policy
- If you want to remove the Software Restrictions Policy
- Right click on Software Restriction Policies
- Select Delect Software Restriction Policy

Hope this helps~!
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33639962
0
 
LVL 1

Author Comment

by:lalkacr
ID: 33641171
Nope, those are not it.

The worst part is, I know that it is something simple!  It sucks getting old.
Capture.JPG
0
 
LVL 1

Accepted Solution

by:
lalkacr earned 0 total points
ID: 33641689
I knew it was easy!!!


•Go to Start --> Run --> and type --> 'gpedit.msc' and hit Enter.
•Look under "Computer Configuration\-->Administrative Templates-->Windows Components
  -->Windows Installer"
•Double-click on "Prohibit User Installs"
•Choose "Enabled"
•Select "Prohibit User Installs" from the drop-down box.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question