Is there any way in Windows XP, Vista or 7, where you can set a domain user as a restricted user, but then allow to install certain approved applications? For example, allow them to download and install updates to TweetDeck themselves?

I'm looking for a way to say "these applications are approved and you may install them if they have this name, and come from the URL, etc".

I know about using GPO to automate installs, but I don't think that is an option with TweetDeck and other Adobe Air apps.



You might take a look at AppLocker which is a new microsoft technology intended to give this type ofcontrol over installing applications. However, it's Windows 7 only.

  • This is a perfect solution...almost. To enable AppLocker, each of our users needs to be running Windows 7 Enterprise edition (equivalent to Ultimate on the personal side). I was so looking forward to this being the solution, but our company couldn't afford to get the licenses so we opted for Win 7 Professional instead. – Ken Pespisa Mar 10 '11 at 15:27
  • wow - I didn't realize it was only available in Enterprise. – Knox Mar 10 '11 at 16:31

Try setting up software restriction policies. Only add certain file paths like C:\Program files\tweetdeck and all other locations tweetdeck needs to update for its install. the only problem i see is having them setup as restricted users..

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.