Disable installation new applications through Group Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi All,

I need to lock my network workstations not giving to the user the
possibility to installa new application. Dying in GPO I found several keys
similart to what I need but they are not the right solution. What I actually
want to is disable *.exe installation at all.

Is this possbile?
 
Hi All,

I need to lock my network workstations not giving to the user the
possibility to installa new application. Dying in GPO I found several keys
similart to what I need but they are not the right solution. What I actually
want to is disable *.exe installation at all.

Is this possbile?
Click to expand...

Probably a question for Group Policy newsgroup. You can disable
any .exe files from being run, but this will more than likely not be
good for you because this stops any program that you use from being
run (all .exe programs). You can disable the Microsoft Installer from
being run, which will stop almost all programs from being installed
(unless the program being installed has it's own installer built in).
I would use this to do what you are trying to do, and then, if you
know certain programs that people are installing that have their own
built in installer, then you can block that specific installer in
group policy. Again, I would post this in the Group Policy newsgroup
for a better answer.
 
Thanks Robert,

I don't find any Group Policy newsgroup hereby. That's why I chose this one
to post. Anyway, I think the solution you proposed it's good. The problem for
me is to find the right policy to set it. That's the problem.
 
Go to Group Policy. Expand:

Computer Configuration: Administrative Templates: Windows Components:
Windows Installer

Top option (Disable Windows Installer) Set to "Enabled"
 
This option can be useful but there's the problem that not all the
applications use Windows Installer so users will still be able to install
some apps.

Regards,
Jan
 
This can be useful buy there is the problem that not all applications use
Windows Installer and so users will still be able to install some apps.

Regards,
 
This can be useful buy there is the problem that not all applications use
Windows Installer and so users will still be able to install some apps.

Regards,
--
Jan Kalcic
IT Consultant







- Show quoted text -
Click to expand...

I believe I included this information in my original post on Mar 7.

"You can disable the Microsoft Installer from being run, which will
stop almost all programs from being installed
(unless the program being installed has it's own installer built in).
I would use this to do what you are trying to do, and then, if you
know certain programs that people are installing that have their own
built in installer, then you can block that specific installer in
group policy."

Yup, there it is.
 
Back
Top