Can we really block users from installing applications through Group policy?

From: chang zhu (cyz2000_at_yahoo.com)
Date: 10/08/04

  • Next message: Augusto Paes de Barros: "Re: Can we really block users from installing applications through Group policy?" 
    Date: Fri, 8 Oct 2004 05:45:31 -0700 (PDT)
To: focus-ms@securityfocus.com

    Hi, all

    The users are not local administrators. We configure
    group policy to prevent user installs but it seems
    that it blocks only .msi packages. Users still can
    install applications through ex. setup.exe...Can we
    really block users from installing applications
    through Group policy?

    Any idea or thoughts on this?

    Plus, if we need to block users from saving .mp3 file
    on their computers, can we do it through group policy?

    we are on windows2000 and XP environment.

    Thanks always,

    Chang

                    
    _______________________________
    Do you Yahoo!?
    Declare Yourself - Register online to vote today!
    http://vote.yahoo.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Augusto Paes de Barros: "Re: Can we really block users from installing applications through Group policy?"

    Relevant Pages

    • Re: Windows XP and Group Policy Preferences
      ... the print$ share on our print server has only domain users group ... Event Source: Group Policy Printers ... Also check to see if the printer installs properly if the drivers for ...
      (microsoft.public.windows.group_policy)
    • Re: GPO Redeploy
      ... I suspect that what happened was that, when you disabled the link, but left the software installed, it broke the relationship between the GPO and the app. ... Was the goal here to basically prevent any new installs during your DR test? ... Group Policy Management solutions at http://www.sdmsoftware.com ...
      (microsoft.public.win2000.group_policy)
    • Installing EXE programs without Domain Admin user
      ... I’ve looked through all of group policy and the closest you can get ... All remote computers have a different random password ... enable users to install software on their own? ...
      (microsoft.public.windows.server.general)
    • Re: Windows XP and Group Policy Preferences
      ... the print$ share on our print server has only domain users group ... I too am having a problem using GPP to push a shared printer to a test ... Event Source: Group Policy Printers ... Also check to see if the printer installs properly if the drivers for ...
      (microsoft.public.windows.group_policy)
    • Re: Unable to access admin shares Server 2003
      ... Do you have Service Pack 1 installed on the 2003 servers? ... available GP settings and their exact path within the Group Policy Editor. ... We havent changed any Group Policy settings other than doing a ... software installs at login. ...
      (microsoft.public.windows.server.general)
    • Quantcast