You can take things to an extreme level using white-listing instead of black-listing. And some programs don't even use installers so trying to only control the installation is only half the problem ans can sometimes be side-stepped anyway.įor that you can use SRP or AppLocker to prevent things from even running. Ultimately, installers are just programs that run. That still won’t stop everything – some apps don’t need to be installed or are simple self-extracting installs.
(WS.10).aspx (search for Prohibit User Installs). #2 There is a group policy to disable per-user installs: If your users are local admins, nothing can totally stop a user from doing things you don't want them to do. #1 Take away admin rights from your users.
0 kommentar(er)
