Comment empêcher un utilisateur de domaine d'installer des programmes ?

Windows Server & IT Pro Active Directory & Entra ID
,
1

My client (XP) can install Chrome in his system being a domain user account.
how can i stop him/them from installation of Chrome through Windows Server 2003.

2

If the users do not have local administrator access, you may simply disable per-user installations via Group Policy.

DisableUserInstalls is a machine policy which will block per-user installations. There is also an option for “hiding” existing per-user installed applications in favor of the per-computer installed versions.

To configure:

  • Open gpmc.msc, select the GPO to which you will add the policy.

  • Navigate Computer Configuration, Policies, Administrative Templates, Windows Components, Windows Installer.

  • Set the policy “Prohibit User Install” to “Enabled”.

  • [Optional] Set the policy “User Install Behavior” to “Hide User Installs”.