My client (XP) can install Chrome in his system being a domain user account.
how can i stop him/them from installation of Chrome through Windows Server 2003.
Comment empêcher un utilisateur de domaine d'installer des programmes ?
Re: Comment empêcher un utilisateur de domaine d'installer des programmes ?
If the users do **not** have local administrator access, you may simply disable per-user installations via Group Policy.
[`DisableUserInstalls`](http://msdn.microsoft.com/en-us/library/windows/desktop/aa368309(v=vs.85).aspx) is a machine policy which will block per-user installations. There is also an option for "hiding" existing per-user installed applications in favor of the per-computer installed versions.
To configure:
- Open `gpmc.msc`, select the GPO to which you will add the policy.
- Navigate Computer Configuration, Policies, Administrative Templates, Windows Components, Windows Installer.
- Set the policy "Prohibit User Install" to "Enabled".
- [Optional] Set the policy "User Install Behavior" to "Hide User Installs".
[`DisableUserInstalls`](http://msdn.microsoft.com/en-us/library/windows/desktop/aa368309(v=vs.85).aspx) is a machine policy which will block per-user installations. There is also an option for "hiding" existing per-user installed applications in favor of the per-computer installed versions.
To configure:
- Open `gpmc.msc`, select the GPO to which you will add the policy.
- Navigate Computer Configuration, Policies, Administrative Templates, Windows Components, Windows Installer.
- Set the policy "Prohibit User Install" to "Enabled".
- [Optional] Set the policy "User Install Behavior" to "Hide User Installs".