Prevent Installs for Other Admins

[davefmurray]

Here in our office network most users have to have admin access to run certain applications. I am wanting to prevent these admin accounts from further installing applications, etc.

Is there an easy way to accomplish this using group policy, applocker or the like? I went thru all the tutorials but didn't find help with this specific issue.

Win7 Ultimate 64bit

Thanks!

 

[logicearth]

Don't give them administrative power. That is the only thing you are going to be able to do it. As long as they have administrative power they have absolute control. You should should find out why these applications need administrative power, either replace them or find a way to get them to work without it.

 

[davefmurray]

Thanks for the reply.

There isn't a way to prevent user 'X' from installing regardless of privilege?

 

[logicearth]

Installers merely moves files from one place to another. It is merely an application no different then the ones you are running. Impossible for a computer to tell the difference between these two tasks. And since the users have administrative power they could get around any restriction.