Allow software installations from the server only |
 |
EXPERT RESPONSE FROM: Jeremy Moskowitz
|
|
|
| > |
QUESTION POSED ON: 07 August 2004
How do I set up a security rights policy where the power user is allowed to install software from our server only? They should not be able to install software off the Net, floppy or a CDROM drive.
|
|
| > |
|
The security model within Windows doesn't do a spectacularly good job at making this task easy. The best approach is to use standard user rights in conjunction with Group Policy Software Installation to deploy your software. In theory, mere mortals cannot install many MSI applications, like MS Office. However, they can install many things that take the form of setup.exe. So, the best approach is to use Software Restriction Policies to restrict all software from running except those applications you want to be installed. Then, use Group Policy Software Installation to deploy the software YOU want to your users, which will install that software with elevated rights (and therefore should install fine.)
|
|
|
|
|
|
|
|
Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
|
|
|
|
|
|
|
|
|
|
|
|
