Win7 prohibits the installation of software, win7 restrictions on the installation of software

Sometimes we are in the security of the computer, you need to prohibit the computer to install software at random, limit the computer to install software. In particular, the current domestic users are gradually filtering from the XP operating system to the win7 system. How to disable the win7 installation software and how to limit the win7 computer installation program becomes a function that the network administrator must pay attention to. This article recommends two ways to prevent win7 from installing software and turn off win7 to install software.

Method 1: Prohibit computer installation software through group policy

1. Press Win+R key, enter “ldped;gpedit.msc” in the operation, press Enter to open local group policy editing. Device.

2. Click to expand “Administrative Templates", click to open “windows components", click to select "Windows Installer", double-click “ disable ms installer".

3. In "Disable Windows Installer", select “already" ""only for unmanaged apps" , select “Always disable ”, click “OK”.

Second, through the computer management software to prohibit win7 computer installation software
If you think the above method is more complex, you can also consider the deployment of computer monitoring software, network monitoring software to achieve. Here I recommend a —— the trend to the USB port monitoring software (download address: http://www.grabsun.com/monitorusb.html), after installing on the computer, you can enable the software " ; prohibit open programs & rdquo; or & ldquo; only let open programs & rdquo; and other functions. Among them, "The program that is forbidden to open" is a list of programs that prohibit the computer from being installed or running. Similar to a blacklist method to prevent the computer from installing or running the program, you can prevent the program from being installed by adding the program name. Or run; and "only allow open programs" is a whitelist-like way to restrict the computer to only install or run certain programs, so you can add some commonly used programs to any other programs. Can not be installed or run. As shown below:

Figure: Power to USB disable software - disable computer installation software

< Br>

Figure: By adding the program name, you can only run the program in the list
In short, prohibit the computer from installing the software, prohibit the win computer from installing the program a lot, the enterprise network administrator can choose according to their own needs. . Generally speaking, the prohibition of installing software through group policy and prohibiting the installation of software through the registry can be reversely modified in a certain way, so that it is easy to bypass the control and reinstall the software; and the network control software prohibits the computer installation program. It effectively prevents employees from being reversely modified and bypasses management. At the same time, it is convenient to restrict the operation of the computer installation program through computer monitoring, which is suitable for the needs of network administrators at all levels.