GPO Computer Install Permissions



Currently our enironment install applications VIA GPO from a UNC path that is
replaicted with DFS. I want to restrict user access to the share and only
allow computer or domain computer access. Will this screw up the GPO and or
repair feature within the MSI's. I want to prevent users from being able to
go to the share and run any of the applications...mainly those users with
local admin rights... I want to set the security permissions to Domain
COmputer Access not Everyone or Athenticated User



Oli Restorick [MVP]

Adding "domain computers":R to the share and removing "everyone" or
"authenticated users" should be all that's necessary. GPO software
installation and the MSI stuff that does the installation and repairs runs
under the security context of the computer, not the user.

Hope this helps


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Preventing installs via GPO 1
Setting local machine permissions via GPO 2
Install devices permission 1
GPO's 3
Need Temp. Install Permissions 1
permission for all users to unlock computer 4