?
Solved

software instalation

Posted on 2016-09-21
3
Medium Priority
?
23 Views
Last Modified: 2016-10-11
I would like to block all software / application installation for all users, However user should able to install the software / application using SCCM app portal, any idea on this
0
Comment
Question by:asnagesh
  • 2
3 Comments
 
LVL 19

Accepted Solution

by:
Mike T earned 2000 total points (awarded by participants)
ID: 41810432
Hi,

Make everyone a standard (non-admin) user. This prevents them installing anything manually. ALL SCCM installs use System account so can't install whatever the user needs/want which is controlled by *you* via collections.

Collections can use direct membership or fancy queries, or fancy queries that look at AD group membership.

If you want more detail, just ask, but that is the high-level answer.

Mike
0
 

Author Comment

by:asnagesh
ID: 41810440
yes, I have done this, however there are some application does not require admin rights for example google chrome,  user still can install without admin rights
0
 
LVL 19

Expert Comment

by:Mike T
ID: 41838072
Users do not need admin rights, and SHOULD NOT be granted them. Ever. ConfigMgr is built to deploy software so has all the rights it needs implicitly. Use it as designed and there will be no need for anyone at all to be admin. Not even admins need to be admin...

Oh and Google Chrome does not need admin rights, I double checked.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Binary Differential Replication, What it is, how it works and how it differs from standard delta file replication
Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question