Is there any way to prevent end users from installing applications on their own when using a full desktop group? I noticed someone managed to install an app into the program files folder so all of the users received it.
By default, all remote desktop users do not have admin rights. If the user is also a domain user that is part of admin or domain admin group, they the user will be able to perform admin task like install apps
@sbuntun Agree with @Soo Kuan Teo. Confirm that the user role and limit them to Remote Desktop Users. Whenever they try to install they will be prompted with a message to enter admin user login to continue.
Hmmm... it may be possible that standard users are able to install store apps. You can try to disable store app with group policy. Computer Configuration\Administrative Templates\Windows Components\Store\"Turn off the store application" if user still able to install app, then maybe try this too: Computer Configuration/Administrative Templates/Windows Components/Windows Installer/"Turn off Windows Installer"
