Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If they are able to install to this folder, they can install malware. Any ideas to prevent them from installing programs to this folder?

share|improve this question

migrated from stackoverflow.com Jun 16 '11 at 12:49

This question came from our site for professional and enthusiast programmers.

2  
It is unnecessary to refer to Chrome as malware. Do you want to start a flame war? – user763305 Jun 16 '11 at 12:39

Yes. Use AppLocker.

share|improve this answer
    
Thanks for the reply, AppLocker can be used to prevent applications/programs that we are aware of, can AppLocker be used to prevent users from running .vbs or any other scripts. Sorry didn't mean to refer chrome as a malware – user84746 Jun 16 '11 at 13:13
    
Yes. AppLocker has two different modes, block all except whitelist OR allow all except blacklist. It can identify programs by name/extension, signature, path, or hash. Different policies can be implemented by user, group, computer, site, domain, and organizational unit. It's a very extensive and complete application policy utility. – Chris S Jun 17 '11 at 1:05

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.