Problem solve Get help with specific problems with your technologies, process and projects.

Preventing users from installing software on PCs within the domain

Can I prevent a user from downloading and installing software on his own PC in a domain? If so, how? Can I also restrict a user from running software other than the one which is installed on his PC? Both scenarios are in respect to a pre-Windows 2000 environment.
If you're really talking about a "pre-Windows 2000 environment" no Group Policy will assist you. This is because Group Policy will not apply to clients earlier than Windows 2000.

However, if we expand the question, and do take into account both Windows 2000 and Windows XP, the news still doesn't get much better. Windows 2000 users can install old-style "setup.exe" software, basically, where they have access. However, the news is slightly better for Windows 2000 clients if your users want to install .MSI files. Most MSI files will be restricted from completing installation (such as Office 2000 and higher). Note, that this is 100% .MSI file dependent, and the operating system has very little to prevent it.

The news is somewhat better for Windows XP clients. If you delve into Software Restriction Policies with Windows XP clients, you'll really get fine control over which applications can and cannot run. In my book, I have nearly a quarter of Chapter 6 dedicated to Software Restriction Policies, so I encourage you to check it out.

Dig Deeper on Microsoft Group Policy Management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.