software instalation

I would like to block all software / application installation for all users, However user should able to install the software / application using SCCM app portal, any idea on this
asnageshAsked:
Who is Participating?
 
Mike TConnect With a Mentor Leading EngineerCommented:
Hi,

Make everyone a standard (non-admin) user. This prevents them installing anything manually. ALL SCCM installs use System account so can't install whatever the user needs/want which is controlled by *you* via collections.

Collections can use direct membership or fancy queries, or fancy queries that look at AD group membership.

If you want more detail, just ask, but that is the high-level answer.

Mike
0
 
asnageshAuthor Commented:
yes, I have done this, however there are some application does not require admin rights for example google chrome,  user still can install without admin rights
0
 
Mike TLeading EngineerCommented:
Users do not need admin rights, and SHOULD NOT be granted them. Ever. ConfigMgr is built to deploy software so has all the rights it needs implicitly. Use it as designed and there will be no need for anyone at all to be admin. Not even admins need to be admin...

Oh and Google Chrome does not need admin rights, I double checked.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.