Block users from installing MSI installed applications
[Published on 20 April 2004 / Last Updated on 20 April 2004]
You use Active Directory and GPOs to install applications but company policy
forbids users from installing or removing applications. How do you enforce the
policy? MSI installations require msiexec.exe and appwiz.cpl access. Change the permissions for these two files
to Readonly for Authenticated Users and Everyone. Use RunAs to execute appwiz.cpl.