client cannot instal software

[bhoyan]

I've DC with OU. I want set that client cannot install application / software. if it can install just from IT dept. anybody know how i can set in GPO or maybe making script.

thnks

 

[sluice]

I assume that the clients and IT Dept are in the OU. You might consider either publishing (optional installation) or assigning (mandatory installation) the software and only give permissions to the IT Dept security group. The software ought to be in a .msi package.
To set up the installation in the policy, right click on your OU, Properties, Group Policy, Edit, User configuration, Software Settings, Software installation, Right click, New package, etcetera

 

[bhoyan]

I'm sorry...for that solution i know from FAQ from this forum. i mean client user cannot install from her cdrom or download from internet .
so if it's computer install new software only just from spesific user (ex. IT dept).

 

[john8188]

The user on the client probably has administrative rights both locally and on the domain. You have to make sure this is not the case