Setting is as follows, no AD, Windows 7, Users mostly on Laptops in the field. Deinstall of Flash centrally, but User keep installing back, can't revoke local Admin status, since no AD no GPO management.

Ideas anyone? THX
0 Comments   [ + ] Show Comments


Please log in to comment

Community Chosen Answer


>can't revoke local Admin status,
>Remove local admin rights
5 minutes with a Linux boot CD/USB stick will bypass that.

Maybe make installation of non-authorised software a disciplinary offence? That won't prevent installations, of course, but how many of your numpty users would have the foresight to remove Flash/whatever before they come to the office (which you will obligate them to do every [x] weeks)?

Answered 06/22/2016 by: VBScab
Red Belt

Please log in to comment


1) let them have Flash.
2) implement AD
3) Remove local admin rights

No, there's no other way.

Answered 06/21/2016 by: vjaneczko
Eighth Degree Black Belt

Please log in to comment
You can stop Flash from running using Application Control. You might be able to stop the installer from running using the same strategy, but I don't know. See pp 391-395 of the K1 6.4 admin guide:
Answered 06/21/2016 by: JasonEgg
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity