GPO - Restrict installs

Firefly86 · 4 Feb 2008 at 10:17

Hi Peeps

As per title really. Whats the best way to restrict domain users from installing any software on their machines.

I've tried path rules for msiexec.exe but that doesn't work. Have also restricted using registry editors but this doesn't seem to stop registry changes from installations.

Any ideas appreciated

Burnsy2023 · 4 Feb 2008 at 10:25

Surrely as limited users they wouldn't be able to do this anyway? What security groups are the users members of?

Burnsy

Firefly86 · 4 Feb 2008 at 10:37

what do you mean by limited users?
They're not members of Power Users at the moment locally.

Sorry to sound noobish but what do you mean by security groups exactly?

Burnsy2023 · 4 Feb 2008 at 12:09

What groups are the domain users members of?

Burnsy

Firefly86 · 4 Feb 2008 at 15:35

ok gawd sorry i get what you mean now lol.

Just added users to local Restriced group. Now no longer able to install any software.

However I have come across a few problems with this, the first being that users are unable to print to Jaws PDF, error access denied

any ideas

domain users are just members of domain users group, and their departamental group.

Uhtred · 4 Feb 2008 at 15:56

find a better pdf converter that doesn't require admin rights to run

NiCkNaMe · 4 Feb 2008 at 17:23

CutePDF is a good one, i'm pretty sure there is a free version.

Firefly86 · 4 Feb 2008 at 20:58

sorted!

saw PDF Creator first and gave it a shot and no problems

thanks peeps

didnt know it was so obvious