Solved

Blocking Software installation

Posted on 2010-11-30
4
331 Views
Last Modified: 2012-05-10
We have Windows 2003 Domain with all the domain Controllers running Windows 2003. We have got approx 10000 users. We have a requirement to block the Software installations in Desktops by users. We want to block .exe files from running but dont want to disturb the Windows internal executables. Is there a way to achieve that.

Many of the users in our environment are lacal admins so this creates problem.
0
Comment
Question by:Neo_78
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 4

Expert Comment

by:jcurrie
ID: 34240322
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 125 total points
ID: 34240335
There are several methods one is the old "white list" in group policy

\user configuration\administrative templates\system  ….  “Run only specified Windows applications

It is not the greatest solution and the Microsoft AD team talked bout it in a mail sack last month (see question about halfway down)
http://blogs.technet.com/b/askds/archive/2010/10/08/friday-mail-sack-cluedo-edition.aspx

They mentioned app locker which is a Windows 7 feature but you can use software restriction policies  http://technet.microsoft.com/en-us/library/bb457006.aspx

Test on a few machines to get a feel for it.

Thanks

Mike
0
 
LVL 4

Assisted Solution

by:jcurrie
jcurrie earned 125 total points
ID: 34241731
Create a Group Policy

Computer Configuration > Administrative Templates > Windows Components > Windows Installer > Prhibit User Installs = Enabled + Prohibit User Installs

This method is super easy to implement but has two drawbacks

1) it only prevents installtions which use the Windows Installer
2) As a domain admin you won't be able to install programs either unless you disable the policy momentarially or push the installs through GPO
0
 

Author Closing Comment

by:Neo_78
ID: 34367890
As none of the Solutions are actually complete but helped with some options only
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question