Group Policy to disable use or install or MS Anti-spyware?

[Jamie]

I require some assistance in forcing all of our users to
NOT use the anti-spyware software and to NOT have the
ability to install it. Unfortunately our users have
complete controll over their PC's (local admin rights) and
that is not going to change. Has anyone played around at
all with this or is there any documentation anywhere?

Thanks in Advance,

Jamie

 

[Bill Sanderson]

You should be able to lock out the ability to install the application, via
group policy, but I haven't done more than briefly experiment with this
facility, and suspect that in your environment it can be circumvented. It
might help, though..

http://www.windowsitpro.com/Windows/Article/ArticleID/8144/8144.html

is a general overview of group policy.

This article appears to directly answer the question you have:

http://techrepublic.com.com/5208-6239-0.html?forumID=66&threadID=110760

I don't believe you can prevent your users from circumventing these policies
in your current situation, but it will take some effort on their part.
Perhaps now is the time to try to ensure that there are some genuine teeth
to your most important IT policies--so that it is clear that violations have
some significant consequences?

 

[JohnF.]

If you are using Windows 2003 Server and your clients are using Windows XP,
here is the info you need:

http://support.microsoft.com/default.aspx?scid=kb;en-us;324036

JohnF.

 

[Jose Natal]

-----Original Message-----
I require some assistance in forcing all of our users to
NOT use the anti-spyware software and to NOT have the
ability to install it. Unfortunately our users have
complete controll over their PC's (local admin rights) and
that is not going to change. Has anyone played around at
all with this or is there any documentation anywhere?

Thanks in Advance,

Jamie
.
If you are using Active Directory and have your users in

a group or groups, you can use a GPO and under User
Configuration-System, select the "Don't Run Specified
Windows Applications" and build a list containing the
executable for it. This way, users who have installed it
or try to install it will be blocked from running it.