Block users from installing MSI installed applications

by Wayne Maples [Published on 20 April 2004 / Last Updated on 20 April 2004]

You use Active Directory and GPOs to install applications but company policy forbids users from installing or removing applications. How do you enforce the policy? MSI installations require msiexec.exe and appwiz.cpl access. Change the permissions for these two files to Readonly for Authenticated Users and Everyone. Use RunAs to execute appwiz.cpl.

See Also

Featured Links