Q

Can a group policy be set to not allow local admin users to install programs?

Can a group policy be set to not allow local admin users to install programs?
You can take away access to the Control Panel completely or Add/Remove programs which would prevent some of it. However, it will not prevent someone from running SETUP.exe for example. You can alter the permissions for the C:Program Files and some sections of the registry -- but in general this leads to problems with applications running and management of the system by the real system administrator. I would suggest looking for another way to provide the access you are looking for give other than making the users administrators on their machines.
This was first published in August 2004

Dig deeper on Microsoft Group Policy Management

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close