Local Group Policy to prevent software installations?

Hi, I'm deploying a new Windows 7 Pro for my family.

I would like to set it up via Local Group/Security Policy to turn off software installs
for all users, except for the administrators, which will be me. I would still like for Users and Guest to be able to download attachments likes .pdf, .mp3 and .doc.

I did some searching around the Internet and all I could find was the UAC option. And I have gone thru all of the policies, however I though maybe I was missing something.

Any recommendations?

thanks

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

Hyper-Me

You could enable Applocker policies to only allow them to run apps you want them to.

JockVSJock

Hyper-Me wrote: »

You could enable Applocker policies to only allow them to run apps you want them to.

I did think of that, however I'm not sure which apps they are going to run.

This computer is going to be in a different location then where I'm at.

Hyper-Me

I think thats possibly the only choice if you need to lock it down that far.

You could also look into Windows Steady State to just do a drive wipe when they reboot, and provide some alternate space to store documents and things.