Disable to install software

The system become slow and performance drops. This affects Windows Installer only. But users can use other methods to install and upgrade programs. The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. Programs setup that way typically were intended to run off a USB drive, but they can just as easily be put somewhere on the user desktop and run from there.

Again, if they can run programs, they can run an alternate browser. Stopping it from "installing" on the machine isn't the only issue. You are talking about stopping program execution.

Some AV software allows you to define a list of programs that it will prevent from running that's basically what they do, if you think about it. Use this link. It will show you how to disable the use of certain. Is there a way via GPO to restrict downloads in such a way that the user cannot download. They do need to run files and it really would be extremely tedious.

Maybe limiting the ability to download would work-if possible. Check out this. The problem theoretically is that restricting download of all files will prevent students from downloading documents from their emails.

However, I have tried it and it still didn't work. I think I'm actually just doing something wrong with the gpo. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Stack Gives Back Safety in numbers: crowdsourcing data on nefarious IP addresses. Featured on Meta. New post summary designs on greatest hits now, everywhere else eventually.

Linked 0. Related 0. Hot Network Questions. Question feed. Server Fault works best with JavaScript enabled. Accept all cookies Customize settings. Showing results for. Show only Search instead for. Did you mean:. Sign In. Anyone successfully doing this without lots and lots of config Still in Preview but you can give it try. Thijs Lecomte. The InTune appstore only route causes havoc for those apps we use that are not in the store I think i will need to set some time aside and look into the ASR route at some point.