How to prevent users to install third party software/unwanted software using GPO in AD

Question

In order to enhance the security, we want to block unwanted third-party software/malware installation at user's machines. Need to implement it through Active Directory Group Policy.

Answer 1

Hello,

I suggest you to use software restriction policies rules: https://learn.microsoft.com/en-us/windows-server/identity/software-restriction-policies/work-with-software-restriction-policies-rules

Or applocker , AppLocker helps you control which apps and files users can run.

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview

---

If the Answer is helpful, please click "Accept Answer" and upvote it.