Solved

How can I prevent Windows 8 pro users from downloading/installing apps?

Posted on 2014-04-15
9
324 Views
Last Modified: 2014-07-17
They have been giving me headache for a while, installing programs that slow/crash the computers, or letting our teen interns play on the computers.
How can I prevent them installing any programs? If I just take their admin rights away, will that work?
thanks
0
Comment
Question by:Cubbybulin
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40002638
If the devices are not in a domain, then you can change them from administrator to users in their user settings. If you need further restrictions, you can go into the computer's Security settings and explicitly stop it by disabling those features for non-administrators.
0
 

Author Comment

by:Cubbybulin
ID: 40002642
They are in a domain.
0
 
LVL 25

Assisted Solution

by:Tony Giangreco
Tony Giangreco earned 167 total points
ID: 40002650
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:Cubbybulin
ID: 40002651
its a windows 2000 domain so i am not exactly sure how to do that, i was hoping there are some settings in windows 8 that i could do
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40002655
0
 
LVL 2

Assisted Solution

by:Stuart Lupton
Stuart Lupton earned 166 total points
ID: 40002658
Using App Locker applied by Group Policy you can lock down all applications and allow only ones that you approve. Alternatively you can blacklist those apps that have been causing you problems by using a file extension rule (easy to get round by renaming the extension) or a hash rule which I have personally used before

There are loads of resource articles out there on the web but this should get you started -

http://technet.microsoft.com/en-us/library/dd723686(v=ws.10).aspx

Oh and if you do decide to implement this make sure you edit the policies from default as I recollect it blocking all apps by default
0
 
LVL 2

Expert Comment

by:Stuart Lupton
ID: 40002678
App locker requires 2008 R2 dfl..
0
 

Author Comment

by:Cubbybulin
ID: 40002703
that would need to be installed on the server?

what if i just change their account type to regular user on the computer? would that prevent them from installing anything?
0
 
LVL 54

Accepted Solution

by:
McKnife earned 167 total points
ID: 40002815
> App locker requires 2008 R2 dfl..
No, it doesn't. Though applocker is not available to Servers 2000, 2003, 2008, it can be managed by those if we configure them with RSAT from win7 pro or higher.
Problem is: the clients would need to run 7/8 enterprise... ;-)
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows Update Error Code 80244019 33 332
Activation Keys added before or after Sysprep 1 295
How to customise Office 2016 font settings with a GPO 3 95
GPO warning 15 66
Firefox seemed to slow down recently and it occurred to me that I had many open tabs — ultimately, I would find out that three-quarters of them were Experts Exchange tabs! :) So I decided to go on a hunt for a tool that would capture the names an…
Sometimes a user will call me frantically, explaining that something has gone wrong and they have tried everything (read - they have messed it up more and now need someone to clean up) and it still does no good, can I help them?!  Usually the standa…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
The viewer will learn how to successfully download and install the SARDU utility on Windows 8, without downloading adware.

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question