Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 402
  • Last Modified:

implement group policy

i'd like to implement a GP to control our AD users to install downloaded software or app, but not prevent our WSUS to install patches on users' machine, could you advise how?

or do you have any good suggestion to manage users to install not work related application on company's mahcine?

current OS is WinXP/Win7. AD is windows 2008.

thanks
0
tonitoni99
Asked:
tonitoni99
2 Solutions
 
DonNetwork AdministratorCommented:
If your users are set up as normal users, they will be restricted from installing applications.

Then if you enable "Allow non-administrators to receive update notifications" they can then install wsus updates.
0
 
Marius GunnerudSenior Systems EngineerCommented:
The problem with setting the user to regular user and not power user or administrator is that there are some softwares such as accounting software (from my experience) that requires higher privileges to run. not sure if this is the case at your site.  If not then I totally agree with dstewartjr that all the users should be normal users.

for some ideas on setting up GPO for software restrictions have a look at the following links.

http://technet.microsoft.com/en-us/library/bb457006.aspx

http://support.microsoft.com/kb/324036
0
 
DucmanCommented:
Check out in GPME: Computer Config - Win settings - Application Control Policies - AppLocker
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now