Solved

software instalation

Posted on 2016-09-21
3
8 Views
Last Modified: 2016-10-11
I would like to block all software / application installation for all users, However user should able to install the software / application using SCCM app portal, any idea on this
0
Comment
Question by:asnagesh
  • 2
3 Comments
 
LVL 17

Accepted Solution

by:
Mike T earned 500 total points (awarded by participants)
ID: 41810432
Hi,

Make everyone a standard (non-admin) user. This prevents them installing anything manually. ALL SCCM installs use System account so can't install whatever the user needs/want which is controlled by *you* via collections.

Collections can use direct membership or fancy queries, or fancy queries that look at AD group membership.

If you want more detail, just ask, but that is the high-level answer.

Mike
0
 

Author Comment

by:asnagesh
ID: 41810440
yes, I have done this, however there are some application does not require admin rights for example google chrome,  user still can install without admin rights
0
 
LVL 17

Expert Comment

by:Mike T
ID: 41838072
Users do not need admin rights, and SHOULD NOT be granted them. Ever. ConfigMgr is built to deploy software so has all the rights it needs implicitly. Use it as designed and there will be no need for anyone at all to be admin. Not even admins need to be admin...

Oh and Google Chrome does not need admin rights, I double checked.
0

Featured Post

ScreenConnect 6.0 Free Trial

Check out the updates in one game-changing release, ScreenConnect 6.0, based on partner feedback. New features include a redesigned UI that improves session organization and overall user experience. See the enhancements for yourself!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SCCM 2012 Upgrade to SP1 4 80
WSUS update (KB2687455) not showing in SCCM 5 205
Deploying Office 2016 using SCM 2012 R2 SP1 - multi-user PCs 6 89
SCCM Reporting 5 62
The following article is intended as a guide to using PowerShell as a more versatile and reliable form of application detection in SCCM.
Binary Differential Replication, What it is, how it works and how it differs from standard delta file replication
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa‚Ķ

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question