Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Remove install ability for admin users


  • Please log in to reply
1 reply to this topic

#1 tiedyeguy64

tiedyeguy64

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:04:45 AM

Posted 20 May 2014 - 11:00 AM

Our office is growing fast, and I am having an issue with rogue users. The main software we use (AutoDesk Building Design Suite) requires users to be admins on their machines. However, we are having users install software on their own...including personal programs, educational licensed software, bootleg software, etc. In the process, several users have installed spyware/malware, leading to bigger issues.

 

Without strict support from management to enforce policy, but with pressure from management to stop this from happening, I am looking for a way to stop user accounts from installing software. I would like to keep my admin account capable of doing this, of course. We are running Win7 Pro 64 on all machines.

 

I am not too familiar with modifying policies in Win7. If you can tell me where to look, I have no issue doing the reading; I just cannot seem to find the correct info with the searches I have done.

 

Any help would be greatly appreciated.

 

 



BC AdBot (Login to Remove)

 


#2 JohnC_21

JohnC_21

  • Members
  • 23,222 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:45 AM

Posted 20 May 2014 - 11:32 AM

You can use the Group Policy Editor to create a Software Restriction Policy. You can also use it to Whitelist applications. You can start with the following.

 

http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx

 

http://technet.microsoft.com/en-us/magazine/2009.10.geekofalltrades.aspx

 

http://www.nsa.gov/ia/_files/os/win2k/Application_Whitelisting_Using_SRP.pdf

 

http://www.frickelsoft.net/blog/?p=24






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users