Restrict software installation

  • Thread starter Thread starter Alfonso
  • Start date Start date
A

Alfonso

Hi, I manage a Windows 2k3 Domain, and I would like to restrict all
kinf of sotware installations. Is that possible using GPOs?

Thanks

Alfonso
 
Alfonso said:
Hi, I manage a Windows 2k3 Domain, and I would like to restrict all
kinf of sotware installations. Is that possible using GPOs?

Yes. The most specific feature is called "Software Restriction
Policies".

Note that these are mostly about what can RUN rather than what
can be installed (but the two goals overlap.)

It is much harder than generally supposed to prevent users
from running arbitrary software -- restriction policies can
be used with other methods to effectively do this.

(e.g., along with permission on both files/directories and
also registry keys; GPOs that remove access to things like
Start->Run, TaskMan, RegEdit.)
 
Back
Top