Granular Install Permissions Group Policy

Posted on 2013-01-15
Medium Priority
Last Modified: 2013-02-04

Is it possible to control via Group Policy specific applications which users can install/upgrade themselves without the need for logging on as admin?

Thinking along the lines of standard desktop applications like Adobe Reader, Flash, Java, etc.
Question by:bikerhong
  • 2
LVL 101

Expert Comment

by:John Hurst
ID: 38778352
Look at Beyond Trust:


This is a granular extension to Group Policies that allow specific permission for installs. It is worth considering.

... Thinkpads_User

Author Comment

ID: 38778437
Thank you, but was hoping for something built in and free :)
LVL 22

Expert Comment

by:Joseph Moody
ID: 38778444
If you don't want to buy anything, you can use AppLocker (http://automatedoutofajob.blogspot.com/2011/12/selecting-programs-that-users-can.html)
LVL 101

Accepted Solution

John Hurst earned 2000 total points
ID: 38778455
There is nothing built in that will permit granular installs, and even the free offerings are very limited.
.... Thinkpads_User

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question