Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If they are able to install to this folder, they can install malware. Any ideas to prevent them from installing programs to this folder?

share|improve this question

migrated from stackoverflow.com Jun 16 '11 at 12:49

This question came from our site for professional and enthusiast programmers.

2  
It is unnecessary to refer to Chrome as malware. Do you want to start a flame war? –  user763305 Jun 16 '11 at 12:39
add comment

1 Answer 1

Yes. Use AppLocker.

share|improve this answer
    
Thanks for the reply, AppLocker can be used to prevent applications/programs that we are aware of, can AppLocker be used to prevent users from running .vbs or any other scripts. Sorry didn't mean to refer chrome as a malware –  user84746 Jun 16 '11 at 13:13
    
Yes. AppLocker has two different modes, block all except whitelist OR allow all except blacklist. It can identify programs by name/extension, signature, path, or hash. Different policies can be implemented by user, group, computer, site, domain, and organizational unit. It's a very extensive and complete application policy utility. –  Chris S Jun 17 '11 at 1:05
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.