I'm working on setting group policies to block .EXE installations from user download folders and desktops, which I have successfully implemented. However, I'm running into an issue when trying to install software like Zoom. When I right-click the EXE and select 'Run as administrator,' it prompts me for my credentials but ends up installing it under my admin profile instead of the user profile. What am I doing wrong? How can I block EXE installs for users while still allowing myself as an admin to install applications directly to their user directories? Thanks for any tips!
3 Answers
Have you thought about installing Zoom for all users? Otherwise, each user on the system needs their separate installation since Zoom doesn't typically have a universal installer option. If you’re missing any installation methods, I'd love to hear about them!
When you run an installer as an admin, it typically installs under the admin's profile. If you want to install applications for users, consider setting up pre-staged installations or using a solution like software center. You might also look into using MSIs that allow you to define installation paths. Automating installs with WinGet could be beneficial too!
You should look into using software restriction policies or AppLocker. They can give you more control over which executables specific users can run. For installations meant for specific users, deployment tools or scripts could also be a good route to take.
Zoom indeed requires individual installations, which can be a hassle if you have multiple users. But for a limited number of users, it might still be worth the effort to set up those installs individually.