Q
Manage Learn to apply best practices and optimize your operations.

Can a group policy be set to not allow local admin users to install programs?

Can a group policy be set to not allow local admin users to install programs?
You can take away access to the Control Panel completely or Add/Remove programs which would prevent some of it. However, it will not prevent someone from running SETUP.exe for example. You can alter the permissions for the C:Program Files and some sections of the registry -- but in general this leads to problems with applications running and management of the system by the real system administrator. I would suggest looking for another way to provide the access you are looking for give other than making the users administrators on their machines.

Dig Deeper on Windows systems and network management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchSQLServer

SearchEnterpriseDesktop

SearchVirtualDesktop

Close