• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Prevent installation or removal of any software

E

EULA

Senior member
I feel silly for asking this, because I know somewhere there's a group policy, but I'm having problems finding it...

I want to lock down a specific user account from installing or removing any applications. Whereabouts is this policy?

Many thanks in advance.

-Eula
 
Can you make them a Restricted User or Limited user? If so, add a Software Restriction Policy set to disallowed-by-default and I think it's basically checkmate for the average PC user. A Limited / RU account can't put new executables where the SRP will allow execution from, and the SRP won't allow execution from anywhere that the Limited / RU account can put executables. So if for example they try installing a portable IM program to their own profile in C:\Documents and Settings, then the SRP won't let them run it.

If you want to get even tighter, you could specifically whitelist the exact apps the users can use: http://pics.bbzzdd.com/users/mechBgon/GPEDIT_RUN_ONLY_ALLOWED_APPS.gif

But either of these would apply to all the users (the SRP can apply to all except Admin-class, however). I'm not l33t enough to know how to make it apply to just one user.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top