Forum Discussion

sbuntun's avatar
sbuntun
Brass Contributor
Mar 11, 2020

How to prevent users from installing applications on full desktop?

Is there any way to prevent end users from installing applications on their own when using a full desktop group? I noticed someone managed to install an app into the program files folder so all of the users received it.

4 Replies

Sort By
  • Soo Kuan Teo's avatar
    Soo Kuan Teo
    Icon for Microsoft rankMicrosoft
    Mar 17, 2020
    By default, all remote desktop users do not have admin rights.
    If the user is also a domain user that is part of admin or domain admin group, they the user will be able to perform admin task like install apps
    • sbuntun's avatar
      sbuntun
      Brass Contributor
      Mar 23, 2020

      The users definitely are just standard users. I've seen stuff like spotify, vlc, Zoom and Teams installed on a per user basis.Soo Kuan Teo 

      • Soo Kuan Teo's avatar
        Soo Kuan Teo
        Icon for Microsoft rankMicrosoft
        Apr 02, 2020
        Hmmm... it may be possible that standard users are able to install store apps. You can try to disable store app with group policy. Computer Configuration\Administrative Templates\Windows Components\Store\"Turn off the store application"
        if user still able to install app, then maybe try this too:
        Computer Configuration/Administrative Templates/Windows Components/Windows Installer/"Turn off Windows Installer"

Resources