• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Prevent installation or removal of any software

EULA

Senior member
I feel silly for asking this, because I know somewhere there's a group policy, but I'm having problems finding it...

I want to lock down a specific user account from installing or removing any applications. Whereabouts is this policy?

Many thanks in advance.

-Eula
 
Can you make them a Restricted User or Limited user? If so, add a Software Restriction Policy set to disallowed-by-default and I think it's basically checkmate for the average PC user. A Limited / RU account can't put new executables where the SRP will allow execution from, and the SRP won't allow execution from anywhere that the Limited / RU account can put executables. So if for example they try installing a portable IM program to their own profile in C:\Documents and Settings, then the SRP won't let them run it.

If you want to get even tighter, you could specifically whitelist the exact apps the users can use: http://pics.bbzzdd.com/users/mechBgon/GPEDIT_RUN_ONLY_ALLOWED_APPS.gif

But either of these would apply to all the users (the SRP can apply to all except Admin-class, however). I'm not l33t enough to know how to make it apply to just one user.
 
Back
Top