Solved

software instalation

Posted on 2016-09-21
3
7 Views
Last Modified: 2016-10-11
I would like to block all software / application installation for all users, However user should able to install the software / application using SCCM app portal, any idea on this
0
Comment
Question by:asnagesh
  • 2
3 Comments
 
LVL 17

Accepted Solution

by:
Mike T earned 500 total points (awarded by participants)
ID: 41810432
Hi,

Make everyone a standard (non-admin) user. This prevents them installing anything manually. ALL SCCM installs use System account so can't install whatever the user needs/want which is controlled by *you* via collections.

Collections can use direct membership or fancy queries, or fancy queries that look at AD group membership.

If you want more detail, just ask, but that is the high-level answer.

Mike
0
 

Author Comment

by:asnagesh
ID: 41810440
yes, I have done this, however there are some application does not require admin rights for example google chrome,  user still can install without admin rights
0
 
LVL 17

Expert Comment

by:Mike T
ID: 41838072
Users do not need admin rights, and SHOULD NOT be granted them. Ever. ConfigMgr is built to deploy software so has all the rights it needs implicitly. Use it as designed and there will be no need for anyone at all to be admin. Not even admins need to be admin...

Oh and Google Chrome does not need admin rights, I double checked.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Article by: Leon
Software Metering within our group of companies has always been an afterthought until auditing of software and licensing became a pain point. Orchestrator and SCCM metering gave us the answer and it was an exciting process.
Some code to ensure data integrity when using macros within Excel. Also included code that helps secure your data within an Excel workbook.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now