Preventing installs via GPO

[Steve]

I am trying to prevent users from installing programs thru
a GPO. I need to do it this way because our line of
bussiness software is reluctant to function under standard
user privs. even after applying the compatws.inf template
on some boxes it works, others it doesn't. if i give them
power users they can still install the BS namely kazza,
whether bug, gator etc. is there a way to do this thru
GPO? or is there some third party software that can do
this?

 

[Steven L Umbach]

If possible use GPO for software assigning/publishing if you can get your
software to be packaged as .msi programs and there are tools that can do it
or ask the publisher. There is a limited ability to control software
installation via Group Policy in user configuration/administrative
templates/system where you can list allowed/dissalowed programs and be sure
to read explaination of policy first. You may also want to list install.exe
and setup.exe as not allowed.Keep in mind if users rename executables they
may still be able to intall software depending on what type it is. Windows
XP Pro has the very powerful Software Restriction Policies that can lock
down a computer like a coffin if there is any room in the budget for
upgrades. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
http://support.microsoft.com/?kbid=310791
http://support.microsoft.com/default.aspx?scid=kb;en-us;314934