Re: How does your company keep employees from loading apps on their PCs?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

Answers are in-line.

First: how should I refer to you in the article, if I quote you?

Mike? ;-)

Also: how do the users respond to those rules?

They got used to it. Some of them might even appreciate it since from the
time we implement these policies there were practically no major outbreaks
or major problems with their computers.

How often do they come to the IT support staff and wheedle for special
permission?

There is practically no need. All applications are evaluated by IT --
including permissions necessary to run the application. This is major
decision factor. So if the application is approved it will be installed
(pushed) to the users that need it by e.g. using Microsoft SMS.
When users get their (new) computer installation image also includes all
necessary applications.

How often is it given?

The only exceptions might me users with laptops. Still if they abuse the
policy (e.g. get infected, try to mess with Windows installation ...) their
computers is fixed (image deployed again), but they lose the privileges.

The main concern here is if user installs software and company gets audited
by e.g. BSA who is responsible for paying the license for software installed
by user on company computer? Company or the user? If the user, how do you
force him/her to pay (specially software that is really expensive)? Most
companies simply do their best not to get into this situation in the first
place

--
Mike
Microsoft MVP - Windows Security

Miha Pihler [MVP] wrote:
Hi,

In environments where I usually work users don't have administrative
privileges on their desktops. This means they can't install applications
(but can run what was pre-installed for them by administrators)
Some of these environments implement some filters of what can be
downloaded
(e.g. prohibition of downloading .exe files, .zip files). This is usually
achieved using Microsoft ISA Server where you can also force what site
users
can visit based on their group membership.

Some of these environments use Microsoft SMS server to check what is
installed and what software actually gets used. If they figure out that
some
software is not used -- they might not buy upgrades (or only buy
necessary
number of licenses for users who actually use this software).

--
Mike
Microsoft MVP - Windows Security




.

Relevant Pages

  • Re: SP2 Not a Problem; its a Learning Curve
    ... There is a very easy way to avoid all the possible installation issues ... with SP-2 already installed. ... The computers would all be free of viruses, ... There is an almost limitless variety of hardware, again, Microsoft has ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Office 2003 On Two PCs?
    ... I just called the Microsoft Licensing place and they said ... they just changed the license agreement for installation ... on up to three computers on Office 2003 Standard Edition ...
    (microsoft.public.office.misc)
  • Re: SP2 install error
    ... I just had this issue one some computers at work (hanging at the SP2 ... this problem and phoned Microsoft. ... files not being recognized by the SP2 installation. ...
    (microsoft.public.windowsupdate)
  • Re: Why no Microsoft solution to the problems with getting Office SP1 to install???
    ... Dell brand computers which only come with Windows XP. ... installation may result in the computer being reclaimed ... are a few reasons for these policies: 1) Microsoft ... products are a defacto standard; ...
    (microsoft.public.officeupdate)
  • Re: SBS 2003, lost companyweb
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... The original Windows SBS installation was preinstalled by an OEM. ... Important You must change this registry entry on all domain controllers. ...
    (microsoft.public.windows.server.sbs)