Forum Discussion
FSERZ
Aug 10, 2022Copper Contributor
Setup School PC user rights problem
Hi, in our organisation we use the Setup School PC App to deploy Windows to our student PCs. All apps should be deployed only by Admin and the students should not be able to install anything. T...
NielsScheffers
Aug 10, 2022Iron Contributor
You are aware that only disabling Windows Installer (msiexec) doesn't block all installation options?
If you're looking to prevent any software from being installed, your best bet would be something like WDAC or AppLocker.
To address your specific question: is anything logged to your DeviceManagement-Enterprise-Diagnostics-Provider event log?
- FSERZAug 15, 2022Copper ContributorHi Niels,
thanks for your reply.
Blocking all installer via WDAC works fine, but it blocks also the apps which should be installed with Intune / Endpoint manager (f.e. Adobe reader intunewin-package).
So I'm still struggeling with a simple problem.- Aug 15, 2022Did you also happen to read this part:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer