Restrict Installation of softwares

You can use a tool like applocker to restrict who can run what applications.

However, an administrator can still gain complete control of the machine. Best solution - don't make them an administrator.

Hi there,

Without using an application manager like sccm, this can get convoluted.

You can prevent tool bars from running by using a GPO, just disable third party browser extensions in the internet explorer section. (Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Advanced features.)
This doesn't prevent install, but does stop them from running.

Regarding software, you can prevent the running of EXE's by GPO, prevent the download of applications, block certain applications by using hash rules.

Can you be more specific regarding the requirement.

For example, why do they have local admin? Is it to install stuff? To run certain software etc...

Need to give Admin access compulsory to make sure they can run the developer apps.

After giving access they do install some malware toolbars / adware app's which resulting in issues.

Preventing running of exe's will not allow to run tools like eclipse, I want to allow only installation & running of Certain App's

Ms office
Eclipse
Apache
Netbeans
Textpad etc

Applocker will solve this for you. It can run in whitelist mode. See this guide on setting it up: http://deployhappiness.com/applocker-as-your-antivirus/

it possible to restrict Installation of software's,toolbars on windows system even after giving administrator access

No.


Keep users as Standard Users.

We are using Windows 7 Pro. SO applocker is not there in this version

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.