Prohibiting user software-installation

It is very common to find software on your managed desktop computers that you (the admin) did not put there, because users are very good at figuring out ways to install applications and software that they use at home. Sometimes, this is with good intentions, utilizing an online tool to help their productivity at work, but other times—perhaps most of the time—what you find are apps installed for entertainment purposes. Maybe a user has installed the Chrome browser because your company-issued Internet Explorer is too restrictive for their tastes, or you sit down to troubleshoot a computer only to find a personal Dropbox application or Spotify running in the systray. I am not saying these applications are ...

Get Mastering Windows Group Policy now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.