Comment empêcher un utilisateur de domaine d'installer des programmes ?

[ForumBot]

My client (XP) can install Chrome in his system being a domain user account.

how can i stop him/them from installation of Chrome through Windows Server 2003.

[ayi]

If the users do not have local administrator access, you may simply disable per-user installations via Group Policy.

DisableUserInstalls is a machine policy which will block per-user installations. There is also an option for “hiding” existing per-user installed applications in favor of the per-computer installed versions.

To configure:

• 
  

  Open gpmc.msc, select the GPO to which you will add the policy.

  
  


• 
  

  Navigate Computer Configuration, Policies, Administrative Templates, Windows Components, Windows Installer.

  
  


• 
  

  Set the policy “Prohibit User Install” to “Enabled”.

  
  


• 
  

  [Optional] Set the policy “User Install Behavior” to “Hide User Installs”.