Dear All,

I create OU to prevent this group of computer to install .msi. and the Group Policy setting as below.
Computer Configuration > Administrative Templates > Windows Components > Windows Installer
-Disable Windows Installer > Enabled > In Disable Windows Installer > Select Always

The problem is it prevent all the user which login to that computer will prevent intallation include local administrator and Domain Admins to install.

Is that any solution where the policy still prevent the normal user to install but allow Domain Admins make the installation.

Thank you very much.

0 Comments   [ + ] Show Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.


Regular users (users not having administrative privs on the client) are not allowed to install software on the computer so why bother?
Answered 05/28/2009 by: AngelD
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity
Admin Script Editor
Admin Script Editor is an integrated scripting environment available free here at ITNinja