Forum Discussion

Brass Contributor

Mar 11, 2020

How to prevent users from installing applications on full desktop?

Is there any way to prevent end users from installing applications on their own when using a full desktop group? I noticed someone managed to install an app into the program files folder so all of th...

Soo Kuan Teo

Microsoft

Mar 17, 2020

By default, all remote desktop users do not have admin rights.
If the user is also a domain user that is part of admin or domain admin group, they the user will be able to perform admin task like install apps

sbuntun
Brass Contributor
Mar 23, 2020
The users definitely are just standard users. I've seen stuff like spotify, vlc, Zoom and Teams installed on a per user basis.Soo Kuan Teo
- Soo Kuan Teo
  Microsoft
  Apr 02, 2020
  Hmmm... it may be possible that standard users are able to install store apps. You can try to disable store app with group policy. Computer Configuration\Administrative Templates\Windows Components\Store\"Turn off the store application"
  if user still able to install app, then maybe try this too:
  Computer Configuration/Administrative Templates/Windows Components/Windows Installer/"Turn off Windows Installer"
- delcemt
  Copper Contributor
  Mar 23, 2020
  sbuntun Agree with Soo Kuan Teo. Confirm that the user role and limit them to Remote Desktop Users. Whenever they try to install they will be prompted with a message to enter admin user login to continue.