Blocking Software installation

We have Windows 2003 Domain with all the domain Controllers running Windows 2003. We have got approx 10000 users. We have a requirement to block the Software installations in Desktops by users. We want to block .exe files from running but dont want to disturb the Windows internal executables. Is there a way to achieve that.

Many of the users in our environment are lacal admins so this creates problem.
Neo_78Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Mike KlineConnect With a Mentor Commented:
There are several methods one is the old "white list" in group policy

\user configuration\administrative templates\system  ….  “Run only specified Windows applications

It is not the greatest solution and the Microsoft AD team talked bout it in a mail sack last month (see question about halfway down)
http://blogs.technet.com/b/askds/archive/2010/10/08/friday-mail-sack-cluedo-edition.aspx

They mentioned app locker which is a Windows 7 feature but you can use software restriction policies  http://technet.microsoft.com/en-us/library/bb457006.aspx

Test on a few machines to get a feel for it.

Thanks

Mike
0
 
jcurrieCommented:
0
 
jcurrieConnect With a Mentor Commented:
Create a Group Policy

Computer Configuration > Administrative Templates > Windows Components > Windows Installer > Prhibit User Installs = Enabled + Prohibit User Installs

This method is super easy to implement but has two drawbacks

1) it only prevents installtions which use the Windows Installer
2) As a domain admin you won't be able to install programs either unless you disable the policy momentarially or push the installs through GPO
0
 
Neo_78Author Commented:
As none of the Solutions are actually complete but helped with some options only
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.