Problem solve Get help with specific problems with your technologies, process and projects.

What's the best way to prohibit users from installing software?

I am a Junior technician at a high school in England. Some of our pupils are being loaned laptops for the summer...

holidays for exam/course work. I would like to prohibit them from installing any additional software on these machines. Can I accomplish this through the registry without having to adjust the individual user accounts and permissions? There are a couple of ways to do this. One is to use RestrictRun, as detailed here.

You can also deny access to specific programs using NTFS permissions.

To prevent a user or group from running "program.exe":

  • CACLS \program.exe /E /D

You can also create a simple user-level account on each machine that doesn't have permissions for installing software.

This was last published in July 2002

Dig Deeper on Windows Operating System Management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.