Manage Learn to apply best practices and optimize your operations.

Can a group policy be set to not allow local admin users to install programs?

Can a group policy be set to not allow local admin users to install programs?
You can take away access to the Control Panel completely or Add/Remove programs which would prevent some of it. However, it will not prevent someone from running SETUP.exe for example. You can alter the permissions for the C:Program Files and some sections of the registry -- but in general this leads to problems with applications running and management of the system by the real system administrator. I would suggest looking for another way to provide the access you are looking for give other than making the users administrators on their machines.
This was last published in August 2004

Dig Deeper on Microsoft Group Policy Management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.