Windows Server 2003 Question

Posted on 2014-08-19
Last Modified: 2015-10-20
I have a 2003 domain and I would like to prevent users from updating software on the computer. E.g. adobe update, java, windows update etc.
Any updates should be prompted with a password. Is that a feature of windows or a third party software??
Question by:FalconTwo
    LVL 7

    Accepted Solution

    Dear Falcon

    You can use Group policy which restrict windows Installer use for a user.


    1. Click Start > Run. This opens the Run dialog box.
    2.Type gpedit.msc in the "Open" text box in the Run dialog, and then click the "OK" button. This opens the Group Policy Editor.
    3. Click to expand Administrative Templates > Windows Components under the Computer Configuration icon in the left-side navigation panel, and then click to select "Windows Installer." This opens the Windows Installer view in the right-side pane.
    4. Double-click on "Prohibit User Installs" in the right-side pane. This opens the Prohibit User Installs Properties dialog box.
    5. Click to select the radio box next to "Enabled," and then click to select the "Prohibit User Installs" option in the "User Install Behavior" drop-down menu. Click the "Apply" button, and then click the "OK" button to complete the process.

    Author Comment

    Do you run this from the server?

    Also if I (The admin) wants to  install/run update I am assuming I have to login to that machine?

    I once saw on a computer where a login prompt prompt appeared if the login individual wants to install the software. Is it possible to get the restriction with a login prompt, so some the proper credentials is entered, the update can proceed

    LVL 11

    Expert Comment

    by:Paul S
    what is the client OS version? Are these client users administrators or normal users on thir PCs?
    LVL 34

    Expert Comment

    The feature you are looking for is available by default on win vista and above
    Because User Access Controls (UAC) are enabled by default on these machines for standard users unless you disable them explicitly which prompt for elevation (admin username and password to do installation)

    Windows updates will be controlled with GPO and with WSUS GPO you are forcing computers to sync with WSUS servers only

    Author Comment

    Using windows 7 pro

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
    Learn about cloud computing and its benefits for small business owners.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now