- Admin KnowledgeBase
- Articles & Tutorials
- Authors
- Blogs
- Hardware
- Message Boards
- Newsletters
- RSS
- Software
- White Papers
- Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
- Windows 2000
- Admin Tips
- Applications
- Block users from installing MSI installed applications
- Applications
- Admin Tips
- Windows 2000
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
- Section(s): Applications, Security, Miscellaneous
- Published on Apr 20, 2004.
- Last Modified on Apr 20, 2004.
- Last Modified by Wayne Maples.
- Rated 3.6 out of 5 based on 10 votes.
You use Active Directory and GPOs to install applications but company policy
forbids users from installing or removing applications. How do you enforce the
policy? MSI installations require msiexec.exe and appwiz.cpl access. Change the permissions for these two files
to Readonly for Authenticated Users and Everyone. Use RunAs to execute appwiz.cpl.
Latest tips by Wayne Maples
Article not looking right or info is missing? Let us know so that we can fix it: .
Featured Links*
Become a WindowsNetworking.com member!
Discuss your network issues with thousands of other network administrators. Click here to join!
