Block users from installing MSI installed applications

You use Active Directory and GPOs to install applications but company policy
forbids users from installing or removing applications. How do you enforce the
policy? MSI installations require msiexec.exe and appwiz.cpl access. Change the permissions for these two files
to Readonly for Authenticated Users and Everyone. Use RunAs to execute appwiz.cpl.

About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top