Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Comment empêcher un utilisateur de domaine d'installer des programmes ?

ayi

My client (XP) can install Chrome in his system being a domain user account. 
how can i stop him/them from installation of Chrome through Windows Server 2003.
<hr>
Source : <a href="http://msdn.microsoft.com/en-us/library/windows/desktop/aa368309(v=vs.85).aspx" rel="noopener nofollow ugc">Server Fault</a>

ayi_2

If the users do not have local administrator access, you may simply disable per-user installations via Group Policy.
<a href="http://msdn.microsoft.com/en-us/library/windows/desktop/aa368309(v=vs.85).aspx"><code>DisableUserInstalls</code></a> is a machine policy which will block per-user installations. There is also an option for “hiding” existing per-user installed applications in favor of the per-computer installed versions.
To configure:
<ul>
<li>
Open <code>gpmc.msc</code>, select the GPO to which you will add the policy.
</li>
<li>
Navigate Computer Configuration, Policies, Administrative Templates, Windows Components, Windows Installer.
</li>
<li>
Set the policy “Prohibit User Install” to “Enabled”.
</li>
<li>
[Optional] Set the policy “User Install Behavior” to “Hide User Installs”.
</li>
</ul>