Prohibit user installs xp

You win by default. What's funny is this will follow them no matter where they log in. This only works if the software relies on the registry. Good luck and post back what you do regardless. I just came by this post and thought I'd give you some insight into Windows Steady State.

I have been using it successfully for about the last two years or so and it does indeed prevent the installation of most software depending on the restrictions that are in place Steady State does have some settings that can be imported into Group Policy and like Deep Freeze, can lock the hard drives of the computers down to wipe out any changes that might have been made by the user s in question.

I don't know what kinds of restrictions you place on your users but it has worked well for me.. Give them an inch, they take a mile! Even though I have these restrictions in place, it's almost impossible to prevent all software from being installed but this does help a lot. You shouldn't have to hash all the different versions of software. Software restriction policies allow you to specify paths, just specify the My Documents folder.

Thank you all for posting your knowledge it really helped me. I will try steady state and see how that works. I have already implemented group policy do stop software restriction. I know there is no such thing as full proof protection but will try couple more options to lock it down as much as possible. If anyone else have anymore insight please post. Just playing Devil's Advocate here, but why do they feel the need to use, for instance, Mozilla apps?

How about talking to the problem children, I mean users, and getting some feedback. Maybe they are more comfortable with FF than IE, maybe it's what they use at home, or maybe they are just trying to get around a problem with IE heaven forbid! Send them an email - It has come to our attention that you have installed an unauthorised application. While this is a clear violation of our Acceptable Use Policy, at this time I am trying to find out is there is a business need for this application and determine the feasibility of adding it to our Allowed list.

To continue this discussion, please ask a new question. Get answers from your peers along with millions of IT pros who visit Spiceworks. This location allows people put in training that need having access to websites the consumer might possibly not have approval to look at or adjust, like directory sites on very constrained pcs. This environment looks both in the pc arrangement and consumer arrangement files. To produce this location effective, make sure that you let the style both in files.

Knowledgeable users normally requires benefit from the consents this style funds to convert their privileges and get lasting entry to limited applications and versions. Keep in mind that the User settings version of this environment is not certain to generally be dependable. These days Under Choice click Show. In the latest computers running windows which starts enter the course of product you want to disallow; in this situation: msiexec.

This setting prevents Windows by operating the systems you specify in this setting. If you enable this setting, users cannot run programs that you add to the list of disallowed applications.

This setting only prevents owners from operating tools which happen to be established by your windowpanes Explorer system. It does not stop individuals from working programs, like for example projects administrator, which can be launched because of the method procedures or by some other systems.

Viewed 1k times. Is this an error or the third option "Prohibit user installs" has been abolished on Windows 7? Thank you. Improve this question. Add a comment. Active Oldest Votes. Improve this answer. Mitch Mitch 1, 11 11 silver badges 19 19 bronze badges. No, I am looking for preventing per-user MSI installs.

Sign up or log in Sign up using Google. Sign up using Facebook.