0

Is there any option beyond separating administrator and standard users to prevent the installation of user-space programs (such as Spotify, using portable software, etc.)?

We have a set of predefined software for our users and there is no need to even execute .exe files to install something or run portable software.

Is there any way of preventing this to keep the user account clean and prevent possible malicious software from being run in the first place?

8
  • There may be a setting in the Group Policy editor>Run>gpedit.msc
    – Moab
    Commented Oct 30, 2019 at 15:03
  • 1
    "We have a set of predefined software for our users and there is no need to even execute .exe files to install something or run portable software." - You can only allow specific executables with a group policy, but if done the incorrect way, would prevent Administrators from performing required functions.
    – Ramhound
    Commented Oct 30, 2019 at 15:08
  • 1
    blog.brankovucinec.com/2014/10/24/…
    – Moab
    Commented Oct 30, 2019 at 15:10
  • 1
    should also be set>>>>thewindowsclub.com/…
    – Moab
    Commented Oct 30, 2019 at 15:11
  • What kind of installations? Using standard user accounts, only the Administrator account can install software. This affects only Windows Installer and does not prevent using other methods.
    – harrymc
    Commented Oct 30, 2019 at 15:13

0

You must log in to answer this question.