How to stop users to install Portable App

Question

How to stop users to install Portable App

Manish Chawda 431

Hi,

How to stop user from installing / using portable apps using group policy or like wise.

Kindly advise

Accepted answer

1 additional answer

Your answer

Answer 1

Andy YOU 3,076

HI ManishChawda-0385,

1.Could you please enter winver in command prompt on win10 computer and look the os version and os version number ?[for example windows 10 enterprise 1809 (os build 17763.316)]

2.What's the name of your Portable App?
We can try to use applocker policy to block the Portable App.
Configuring AppLocker in Windows Server 2019 | Active Directory Group Policy
https://www.youtube.com/watch?v=uQCuBl5xjGU

How to Use AppLocker to Allow or Block Executable Files from Running in Windows 10
https://www.tenforums.com/tutorials/124008-use-applocker-allow-block-executable-files-windows-10-a.html

Please Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice.

other document for your reference
https://social.technet.microsoft.com/Forums/en-US/dfd21e22-b245-4d2b-b9c7-912fe357653e/how-to-block-portable-application-amp-prevent-installation-on-active-directory?forum=winserverGP

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Manish Chawda 431 Reputation points

2021-07-05T06:51:09.663+00:00

Hi,

Thanks for the reply.
I have gone through all the links but the issue is that compared to your mentioned links, here I am not sure when / which user will have portable exe, so path is unknow which is the prime requirement w.r.t Applocker.

I want that in advance I configure any portable exe which users might try to install in future but since I have configured in advance so he will be unable to execute.
Please correct my requirement if not

Hope your clear.
Andy YOU 3,076 Reputation points

2021-07-06T06:14:30.06+00:00

HI

"here I am not sure when / which user will have portable exe, so path is unknow which is the prime requirement w.r.t Applocker."
Do you know which portable exe will run? If we know, we can try to set "publisher" for blocking app.
Andy YOU 3,076 Reputation points

2021-07-09T02:45:18.567+00:00

HI
Is there any progress on your question?
Manish Chawda 431 Reputation points

2021-07-10T13:43:42.45+00:00

Hi,

No I am not sure as to which time which user will install which type of portable app. So I want solution which is dynamic in nature. Are you aware with such type of solutions ?
Andy YOU 3,076 Reputation points

2021-07-12T08:10:41.367+00:00

HI ManishChawda-0385,

"I want solution which is dynamic in nature. Are you aware with such type of solutions?"
I am not sure Macfee or other third-party system defense software to set white list, this method will disallow other apps not in white list, I think it can accomplish your target.

You can contact their support then confirm if their solution can work for you.

Macfee virus software support.
https://support.mcafee.com/webcenter/portal/supportportal/pages_home?pageTemplate=null

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Michael Taylor 60,326 Reputation points

2021-07-12T12:41:37.443+00:00

As I mentioned when you first posted your question - group policies. Use a software restriction policy if you want to limit what software a user can run. Note that in my experience it isn't going to turn out well unless you're talking a retail or kiosk type system. In all other cases there is simply too many apps to whitelist.

If you don't want user installing software from MS Store then there is also a GP for that.
M4 1 Reputation point

2021-07-31T11:44:37.73+00:00

No,
It is not sure that which user as per his needs will try to download which portable app. So to predict such thing is not possible. I want that if there is any metadata like thing which can judge difference between installable Vs portable so we can stop user from downloading and using portable.

Is there any way ?

Answer 2

Michael Taylor 60,326

A portable app as in one you literally download and just run? You can't short of setting the GPO to whitelist the apps that can be run. A portable app is literally just an executable.

If you are instead referring to apps downloaded from the MS Store then there is a GPO that prevents users from installing applications from the store.

Share via

How to stop users to install Portable App

1 additional answer

Your answer