GPO Computer Install Permissions

[Guest]

Currently our enironment install applications VIA GPO from a UNC path that is
replaicted with DFS. I want to restrict user access to the share and only
allow computer or domain computer access. Will this screw up the GPO and or
repair feature within the MSI's. I want to prevent users from being able to
go to the share and run any of the applications...mainly those users with
local admin rights... I want to set the security permissions to Domain
COmputer Access not Everyone or Athenticated User

 

[Oli Restorick [MVP]]

Adding "domain computers":R to the share and removing "everyone" or
"authenticated users" should be all that's necessary. GPO software
installation and the MSI stuff that does the installation and repairs runs
under the security context of the computer, not the user.

Hope this helps

Oli