Solved

software instalation

Posted on 2016-09-21
3
10 Views
Last Modified: 2016-10-11
I would like to block all software / application installation for all users, However user should able to install the software / application using SCCM app portal, any idea on this
0
Comment
Question by:asnagesh
  • 2
3 Comments
 
LVL 17

Accepted Solution

by:
Mike T earned 500 total points (awarded by participants)
ID: 41810432
Hi,

Make everyone a standard (non-admin) user. This prevents them installing anything manually. ALL SCCM installs use System account so can't install whatever the user needs/want which is controlled by *you* via collections.

Collections can use direct membership or fancy queries, or fancy queries that look at AD group membership.

If you want more detail, just ask, but that is the high-level answer.

Mike
0
 

Author Comment

by:asnagesh
ID: 41810440
yes, I have done this, however there are some application does not require admin rights for example google chrome,  user still can install without admin rights
0
 
LVL 17

Expert Comment

by:Mike T
ID: 41838072
Users do not need admin rights, and SHOULD NOT be granted them. Ever. ConfigMgr is built to deploy software so has all the rights it needs implicitly. Use it as designed and there will be no need for anyone at all to be admin. Not even admins need to be admin...

Oh and Google Chrome does not need admin rights, I double checked.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Adding Computers to AD groups through an SCCM Task Sequence
Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question