Prevent user to install software from USB/CD/DVD drives

We would like to restrict users on the client machines to be able to install softwares from USB / CD / DVD drives. However we would like to give the users capability to install SCCM packages from shared location. Moreover we do not want to disable USB/CD/DVD drives so that users can copy the contents from USB drive.

How can I prevent the users from installing the software only from USB or CD or DVD via Group Policy?
a_adminAsked:
Who is Participating?
 
SandeshdubeySenior Server EngineerCommented:
The best option is to disable the acess to USB,CD-ROM,floppy by GPO.
Refer below link for the same.
http://support.microsoft.com/kb/555324

Also ensure that user does not have admin rights on the PC so that he cannot install any application.

To deploy SCCM packages you can use GPO to deploy the same.
http://support.microsoft.com/kb/816102
http://support.microsoft.com/kb/302430

Hope this helps

0
 
NikSystems SpecialistCommented:
If you don't restrict USB/CD/DVD you can't prevent users to bring .exe files copy files to local disk and install from it.

Also, you wouldn't achieve nothing with open USB/DVD drive.

Anyway, as far as I know, this is not possible not even with a third party software like DeviceLock.
0
 
NikSystems SpecialistCommented:
It seems that you're able to do what you want with the latest version of Device Lock, but additional licence is needed for Content Lock.

Device Lock can be easily integrated with AD.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
a_adminAuthor Commented:
I think you are right, we have to disbale USB/CD/DVD so that users can not open these drives or we have to restrict user to install any software on the machine. I have the ides how to disbale USB/CD/DVD via GPO. Can you advise how can I achieve the other option?
0
 
NikSystems SpecialistCommented:
Sorry, I didn't understand? Which other option?
0
 
PberSolutions ArchitectCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.