User rights and security

[ineuw]

How is it possible for a user without administration rights to install Google Chrome? Furthermore, the installation appears in the user's view of the Control panel's list of installed programs, but it is not showing up in the admin's account installed programs?


Also Revo uninstaller does not show it at all anywhere.

 

[Tharthan]

install Google Chrome

Why would you do this?

 

[ineuw]

Sorry for the misunderstanding. I am asking because someone did it on one of the W7 desktops, and I want to know how it was done, so that I can prevent it in the future.

 

[torchwood]

Hi

i suspect the policy was incorrectly set-up

have a read of these tutorials

Group Policy Editor - Quickly View Enabled Policies in Windows

Group Policy - Apply to a Specific User or Group

note the order

Applications - Run Only Specified Programs in Windows

note cmd.exe


Is Chrome the portable version??






Roy

 

[ineuw]

Hi
i suspect the policy was incorrectly set-up
have a read of these tutorials
Group Policy Editor - Quickly View Enabled Policies in Windows
Group Policy - Apply to a Specific User or Group
note the order
Applications - Run Only Specified Programs in Windows
note cmd.exe
Is Chrome the portable version??
Roy

I am sure that your time is precious and I don't want you to waste time on this. The potential damage is really unimportant. The computers are set up in the community hall of a seniors' residence.

These Window 7 desktops were donated several years ago by a computer dealer of refurbished office desktops. They were all licensed new W7 Pro with MS Office installations and I volunteered to look after them. There are dozens of people who use these computers daily and I am only there when I am called, or perform administrative tasks.

Any of the users could have installed it. I think it's a portable Chrome but will check. I only asked because if these seniors can download and install portable apps then that's a security flaw. Unless Google Chrome was designed the app this way.

I know about group policies and rights, and went through all the templates and nothing is defined - it is as it always was since they were set up.

In any case I am hoping to get donated Windows 10 machines, perhaps in a few weeks.

 

[file3456]

Group policy is what you use to control what people can and can't do on a computer either Win 7 or 10. So you're gonna have to go into each computer and future computers and set each policy up correctly.

Also, portable Chrome, portable Firefox or any portable App DOES NOT install. It runs from its folder and may create a few directories, nothing that should be of a concern. Also note that not all programs that are installed show up under Revo Uninstaller. If it doesn't show up there look in the Add/Remove programs in the control panel. If not there either then they ran a portable version. To remedy that forbid USB/disk access.

In fact, take it up a step and sandbox the whole computer with Shadow Defender. This will lock down the OS in its present state and any changes are deleted on OS restart. It would be great for this purpose.

There is a lot of software out there to child proof/granny proof a computer as well. A quick look reveals this: Free PC Access Control - SnapFiles

 

[torchwood]

Hi

If no group policies are installed - anybody can do anything

Why wait for donated comps

All genuine comps can still be updated for free
Upgrade to Windows 10 from Windows 7 for Free | Tutorials
(as of 2 days ago)


Roy

 

[ineuw]

Thanks for your input and the software is genuine. These desktops have reached the end of their useful lives. They lack sufficient memory (DDR2), the disks are 5400RPM so they crawl. and that's why I need to upgrade them. Spending more time to upgrade to Windows 10 makes no sense. Each desktop takes me 2 - 3 hours a month to maintain and that's the reason. Besides the new Windows 10 desktops will also be donated.

 

[townsbg]

My school used deep freeze on the lab I used. You had to have a password on the computer to make permanent changes. Any other changes where wiped out on reboot and they had forced reboots every night. If you don't want users to make permanent changes installing something like that is the way to go.

 

[RolandJS]

Many libraries and computer classes use LanSchool or Guardian or something similar to actively monitor what is going on with each computer in the area. DeepFreeze or something similar is also used by many libraries "to bat cleanup".

 

[wither 2]

If the installer is an .exe file, have you tried right clicking on it and selecting "run as administrator?"