Home
Topics
Microsoft Active Directory
Microsoft Group Policy Management
Allow software installations from the server only

Allow software installations from the server only

How do I set up a security rights policy where the power user is allowed to install software from our server only? They should not be able to install software off the Net, floppy or a CDROM drive.

Requires Free Membership to View

Login

By submitting you agree to receive email communications from
TechTarget and its partners. Privacy Policy Terms of Use.

The security model within Windows doesn't do a spectacularly good job at making this task easy. The best approach is to use standard user rights in conjunction with Group Policy Software Installation to deploy your software. In theory, mere mortals cannot install many MSI applications, like MS Office. However, they can install many things that take the form of setup.exe. So, the best approach is to use Software Restriction Policies to restrict all software from running except those applications you want to be installed. Then, use Group Policy Software Installation to deploy the software YOU want to your users, which will install that software with elevated rights (and therefore should install fine.)

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary

This was first published in August 2004

Join the conversationComment

Share

Comments

Results

Contribute to the conversation

All fields are required. Comments will appear at the bottom of the article.

Back to top

More from Related TechTarget Sites

Server Virtualization
Cloud computing
Exchange
SQL Server
Windows IT
Enterprise Desktop
Virtual Desktop

Server Virtualization
- How can I enable automated VM resource provisioning?
  
  As with many other facets of virtualization, VM resource allocation is becoming automated. Find out what tools you can use for automated provisioning.
- Columbia Sportswear's move from virtualization to private cloud computing
  
  Columbia Sportswear parlayed server virtualization into a private cloud. Along the way, it found that its management tools needed serious rethinking.
- Power management a must for oVirt high availability
  
  Dodge dreaded downtime by enabling power management in your oVirt 3.1 environment.
Cloud computing
- Google Compute Engine prices on par with AWS -- for now
  
  Conventional wisdom has Google and AWS locked in the Price War of the Titans with the launch of GCE, but a deeper look reveals a different truth.
- Limiting the effects of cloud computing outages
  
  After making the case for cloud based on high availability, IT pros are upset by cloud outages. With planning, there are ways to craft a strategy.
- Amazon Redshift an appealing alternative to on-premises data warehouse
  
  Amazon Redshift has intriguing pricing and features, but beware of its differences from a traditional, on-premises data warehouse.
Exchange
- Configuring federation proxy servers for a hybrid Office 365 deployment
  
  Part of the hybrid Office 365 single sign-on configuration process is correctly setting up federation proxy servers. Here's how.
- Exchange 2013 anti-malware protection: Will you need anything else?
  
  Trusting native Exchange 2013 anti-malware protection to protect your environment is an option, but that doesn't necessarily mean it's the best one.
- Exchange 2013 CU1 migration considerations
  
  Before migrating to Exchange 2013 CU1, you should know about some of the most important updates and how they'll affect your environment.
SQL Server
- Adam Machanic talks SQL Saturday
  
  We caught up with Adam Machanic, group leader of the New England SQL Server user group, at SQL Saturday Boston. Find out what he shared with us.
- SQL Server meets database application security
  
  Make sure your SQL Server is secure by studying these general guidelines for secure database applications from SQL Server expert Roman Rehak.
- xVelocity Columnstore Indexes in SQL Server 2012
  
  Curious about how xVelocity can help with your columnstore indexes? Check out this tip from Basit Farooq to find out.
Windows IT
- How to advance your cloud skills and get ahead of the gap
  
  There may be a growing shortage of IT pros with cloud skills, but you can take action now and become a valuable asset with the right skills.
- Prepare for a SharePoint 2013 upgrade with five tips
  
  Considering an upgrade to SharePoint 2013? Find out the answers to the most common questions IT pros will ask before making the jump.
- Prioritize your IT tasks and finally conquer your to-do list
  
  It's easy to feel overwhelmed by a growing to-do list of IT tasks, but there are easy ways you can decide what to tackle first and what can wait.
Enterprise Desktop
- Windows 8 tools build on native Windows 7 utilities with new capabilities
  
  New and updated Windows 8 tools can help admins and users. Windows 8 utilities include functions for backing up and restoring systems.
- Why a Windows security scan is not enough to protect your workstations
  
  A traditional Windows security scan may lure IT into complacency about desktop vulnerabilities, so look at four areas to beef up Windows security.
- Microsoft addresses legacy apps with Windows 8 app compatibility tools
  
  New operating systems are always accompanied by compatibility concerns. Windows 8 app compatibility is no different, or is it?
Virtual Desktop
- Citrix expected to tackle mobile application delivery, VDI costs
  
  As Citrix Synergy 2013 kicks off in Anaheim, attendees hope to learn about new desktop and application delivery strategies for the mobile world.
- How Microsoft RDP 8.0 addresses WAN, graphics shortcomings
  
  Microsoft's Remote Desktop Protocol improves the user experience with the release of RDP 8.0 in Windows Server 2012, but there are some limitations.
- Making Citrix XenDesktop play nice with a VMware hypervisor
  
  You can run XenDesktop on a VMware hypervisor, but what does that entail? Learn how clustering and vCenter Server work in a mixed VDI environment.

All Rights Reserved,Copyright - 2013, TechTarget