How to prevent Users in Domain installing and removing software?

Question

I am using ADDS in my Company, using Windows server 2012 r2.

Like the tittle, how to prevent instaling, removing any software for my users in their computer? I want to protect company's computers.

I dont want my users can installing , and removing anything.

So what can I do with GPO, what GPO can do that ?

Tks all.

Tell them not to. If they don't listen, give them a warning. If they still don't listen, fire them. — ceejayoz, Nov 19 '16 at 02:17
Don't make them local Administrators of their computers and they shouldn't be able to install software. — joeqwerty, Nov 19 '16 at 03:01
So just create a normal user and dont need to create any GPO for this case ? — Hưng Híp, Nov 19 '16 at 03:03

score 0 · Answer 1 · answered Dec 12 '16 at 17:45

0

Well you just have to have UAC enabled and not to place them in any local administrator account group this way every time they need to install something or uninstall it will prompt them for a domain or local admin account .

answered Dec 12 '16 at 17:45

Elie

107
1
7

How to prevent Users in Domain installing and removing software?

1 Answers1