Can a group policy be set to not allow local admin users to install programs?

Can a group policy be set to not allow local admin users to install programs?

    Requires Free Membership to View

You can take away access to the Control Panel completely or Add/Remove programs which would prevent some of it. However, it will not prevent someone from running SETUP.exe for example. You can alter the permissions for the C:Program Files and some sections of the registry -- but in general this leads to problems with applications running and management of the system by the real system administrator. I would suggest looking for another way to provide the access you are looking for give other than making the users administrators on their machines.

This was first published in August 2004

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.