Blocking users from uninstalling programs?

Surely just use non admin account for your users - unless you are writing adware/nagware/malware??
 
headstrong said:
Hi

Is it possible to stop sum1 from uninstalling/deleting a program that I install on their pc's?

I will be installing route sentry on all network pc's to save on bandwidth costs but i'm scared that sum1 will just delete it either my mistake or on purpose! (http://mybroadband.co.za/vb/showthread.php?t=39234&highlight=route+sentry)

Is there a way to block users from uninstalling it?

Thanks
Click to expand...


What kind of network are you running?

If it's AD (or an MS domain) then a domain admin can use the group policies to stop users from doing most things.
 
Skeptik said:
Surely just use non admin account for your users - unless you are writing adware/nagware/malware??
Click to expand...
I've been down this road, and let me tell you friend, sooner or later it's a recipe for pulling your hair out and going quietly crazy! ...it comes down to how 'doze has been designed - or, as importantly, how apps are written: all too often some or other app needs FULL access to somewhere or other on the system (\Program Files\* is just one location, there tend to be others) and once you have an account locked down to non-admin access, you have to spend all sorts of life-force sucking time sorting out all these conflicts.

So, no: this route has a way of being problematic, far better to use the group policy(microsoft.com search result) editor route (elgooG search result) and keep what little of your sanity you can :cool:
 
Its is not on any sort of server and all pcs have full admin rights!

I'll just install it and not let them know about it! :)

What they dnt know cant hurt them!

PS its not malware or anything dodgy its route sentry!

thanks!
 
Upon reflection I've remembered an oldie (but goodie) trick: install TweakUI and use it to hide/'remove' the Add/Remove icon from Control Panel (they can't remove apps if they can't find button to start it!) and then (optionally) move the program listing from the 'C:\Documents and Settings\All Users\Start Menu\Programs' context, or the particular user one and move it to the Administrator one ..while you're there, similarly move the entry to 'Powertoys for Windows XP'.

This is at best a flimsy defence, but definitely (all the damnfoolidjits that *shudder* spell that 'definately' PLEASE take note!) a step up from just hoping that your (l)users :rolleyes: don't notice the app, it actively hides and obfuscates the means for them to futz where they don't belong ..and it's a whole sight easier than getting to grips with proper/heavyweight management tools like GPE.

edit: while noodling around in the 'validation required' area I stumbled across the Shared Computer Toolkit for Windows XP tool; check it out, it may be helpful/relevant to the problem here.
 
Last edited:
Here is also a registry hack to do this:

To prevent users from using Add/Remove Programs, Enable the Disable Add/Remove Programs Group Policy at User Configuration\Administrative Templates\Control Panel\Add/Remove Programs.

Enabling the policy sets the NoAddRemovePrograms value name to 1. This REG_DWORD data type is located at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall.

NOTE: When NoAddRemovePrograms is 1, it takes precedence over the other entries at this subkey.

I am just thinking now if a user is clever enough to look for the uninstall.exe file under the program files folder where the app is installed, the above will not prevent them from still being able to uninstall it.

Still, should be OK for the novice users.
 
Thanks for your tips!

I might get into legal trouble if I hide/remove the 'add/remove programs' menu without permission! But thanks anyway!

I think i'm just going to say to them:" If u remove this program then your internet will not work!" .... they will be too scared to even open the program!!! :)

Is there perhapps a way to hide it from the taskbar??? They wont even think about looking for it to uninstall it ....if they dnt know its there!

Thanks
 
As mentioned above use either Non Admin user account or AD Group Policies.If u really wanted to restrict your users u could only allow a MS Dos prompt with no GUI
 
Well I dont want to restrict the users at all...... I cant stop my dads laptop from uninstalling stuff or changing his user account etc... the last time i fiddled with his network settings he coudnt log in and had to sent laptop all the way to joburg!

So I need a way to hide the process from being viewed in the taskbar?

thanks anyway!
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X