Hi All,

I need to lock my network workstations not giving to the user the
possibility to installa new application. Dying in GPO I found several keys
similart to what I need but they are not the right solution. What I actually
want to is disable *.exe installation at all.

Is this possbile?
--
Jan Kalcic
IT Consultant

On Mar 7, 8:53 am, jkalcic <jkal...@discussions.microsoft.com> wrote:
> Hi All,
>
> I need to lock my network workstations not giving to the user the
> possibility to installa new application. Dying in GPO I found several keys
> similart to what I need but they are not the right solution. What I actually
> want to is disable *.exe installation at all.
>
> Is this possbile?
> --
> Jan Kalcic
> IT Consultant

Probably a question for Group Policy newsgroup. You can disable
any .exe files from being run, but this will more than likely not be
good for you because this stops any program that you use from being
run (all .exe programs). You can disable the Microsoft Installer from
being run, which will stop almost all programs from being installed
(unless the program being installed has it's own installer built in).
I would use this to do what you are trying to do, and then, if you
know certain programs that people are installing that have their own
built in installer, then you can block that specific installer in
group policy. Again, I would post this in the Group Policy newsgroup
for a better answer.

Thanks Robert,

I don't find any Group Policy newsgroup hereby. That's why I chose this one
to post. Anyway, I think the solution you proposed it's good. The problem for
me is to find the right policy to set it. That's the problem.

--
Jan Kalcic
IT Consultant


"Robert Jacobs" wrote:

> On Mar 7, 8:53 am, jkalcic <jkal...@discussions.microsoft.com> wrote:
> > Hi All,
> >
> > I need to lock my network workstations not giving to the user the
> > possibility to installa new application. Dying in GPO I found several keys
> > similart to what I need but they are not the right solution. What I actually
> > want to is disable *.exe installation at all.
> >
> > Is this possbile?
> > --
> > Jan Kalcic
> > IT Consultant
>
> Probably a question for Group Policy newsgroup. You can disable
> any .exe files from being run, but this will more than likely not be
> good for you because this stops any program that you use from being
> run (all .exe programs). You can disable the Microsoft Installer from
> being run, which will stop almost all programs from being installed
> (unless the program being installed has it's own installer built in).
> I would use this to do what you are trying to do, and then, if you
> know certain programs that people are installing that have their own
> built in installer, then you can block that specific installer in
> group policy. Again, I would post this in the Group Policy newsgroup
> for a better answer.
>
>

jkalcic wrote ::
> I don't find any Group Policy newsgroup hereby.


news://msnews.microsoft.com/microsof...s.group_policy

Good Luck, Ayush.
--
XP-Tips [Set up XP so that only authorized people can use it] :
http://www.microsoft.com/windowsxp/u.../soleuser.mspx

Go to Group Policy. Expand:

Computer Configuration: Administrative Templates: Windows Components:
Windows Installer

Top option (Disable Windows Installer) Set to "Enabled"

This option can be useful but there's the problem that not all the
applications use Windows Installer so users will still be able to install
some apps.

Regards,
Jan


"Robert Jacobs" wrote:

> Go to Group Policy. Expand:
>
> Computer Configuration: Administrative Templates: Windows Components:
> Windows Installer
>
> Top option (Disable Windows Installer) Set to "Enabled"
>
>

This can be useful buy there is the problem that not all applications use
Windows Installer and so users will still be able to install some apps.

Regards,
--
Jan Kalcic
IT Consultant


"Robert Jacobs" wrote:

> Go to Group Policy. Expand:
>
> Computer Configuration: Administrative Templates: Windows Components:
> Windows Installer
>
> Top option (Disable Windows Installer) Set to "Enabled"
>
>

On Mar 21, 10:18 am, jkalcic <jkal...@discussions.microsoft.com>
wrote:
> This can be useful buy there is the problem that not all applications use
> Windows Installer and so users will still be able to install some apps.
>
> Regards,
> --
> Jan Kalcic
> IT Consultant
>
>
>
> "Robert Jacobs" wrote:
> > Go to Group Policy. Expand:
>
> > Computer Configuration: Administrative Templates: Windows Components:
> > Windows Installer
>
> > Top option (Disable Windows Installer) Set to "Enabled"- Hide quoted text -
>
> - Show quoted text -

I believe I included this information in my original post on Mar 7.

"You can disable the Microsoft Installer from being run, which will
stop almost all programs from being installed
(unless the program being installed has it's own installer built in).
I would use this to do what you are trying to do, and then, if you
know certain programs that people are installing that have their own
built in installer, then you can block that specific installer in
group policy."

Yup, there it is.