Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If they are able to install to this folder, they can install malware. Any ideas to prevent them from installing programs to this folder?

share|improve this question

migrated from Jun 16 '11 at 12:49

This question came from our site for professional and enthusiast programmers.

It is unnecessary to refer to Chrome as malware. Do you want to start a flame war? – user763305 Jun 16 '11 at 12:39

1 Answer 1

Yes. Use AppLocker.

share|improve this answer
Thanks for the reply, AppLocker can be used to prevent applications/programs that we are aware of, can AppLocker be used to prevent users from running .vbs or any other scripts. Sorry didn't mean to refer chrome as a malware – user84746 Jun 16 '11 at 13:13
Yes. AppLocker has two different modes, block all except whitelist OR allow all except blacklist. It can identify programs by name/extension, signature, path, or hash. Different policies can be implemented by user, group, computer, site, domain, and organizational unit. It's a very extensive and complete application policy utility. – Chris S Jun 17 '11 at 1:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.