Share via

Prevent software to be installed on local PC

Goro 1 Reputation point
2021-06-02T18:12:49.533+00:00

I am not a server guy, but I have access to certain features of SCCM console. There is a certain software that I do not need/use, that is automatically gets pushed from a server and installed almost daily on my client PC which I manually delete/uninstall. Is there a way to prevent certain program to be auto-installed on a client PC? Can something be done on local client machine? Or SCCM console? If SCCM, where do I need to look for?
Thanks

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,307 questions
Microsoft Configuration Manager Application
Microsoft Configuration Manager Application
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Application: A computer program designed to carry out a specific task other than one relating to the operation of the computer itself, typically to be used by end users.
461 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jiang Zhang 786 Reputation points
    2021-06-03T10:55:16.653+00:00

    Hi,

    After reviewing your question, I think your goal is preventing a certain software that is getting pushed from a server to be automatically installed on a client PC. If your server and client were in a same domain, you might try run “gpresult /h C:\%computername%_gp.html” command in CMD on the client PC both Run as administrator and without Run as administrator. You would get TWO of XXX_gp Logs after you run such command. Please post these TWO Logs if you wish so I could investigate if the policy is installed in the deployment program and fix the issue.

    The following is the example how I run this command as administrator on my client in a Domain environment and what the Log looks like.

    101988-image.png
    101989-image.png
    101928-image.png

    Best Regards,
    Mulder Zhang

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  2. AllenLiu-MSFT 41,371 Reputation points Microsoft Vendor
    2021-06-08T08:44:25.627+00:00

    Hi, @Goro
    Thank you for posting in Microsoft Q&A forum.
    I think your client PC is managed by SCCM, the certain software is deployed by your SCCM administrator and will always install if SCCM checked the software is not installed in your client PC. We can prevent it in SCCM console easily.
    First find the application from SCCM console, and look at the deployments to see the device collection deployed to.
    103413-2.jpg

    Then navigate to Assets and Compliance\Device Collections find the collection, see the Membership Rules of the properties, if it is a direct rule, delete your PC directly, if it is a query rule, modify the query rule to exclude your PC.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.