We will have School PC, The student shall be allow to install software but not uninstall the antivirus.
Hi,
Is it possible to lock down so student cant uninstallation some programs like the antivirus, but can install there on programs. We will deploy the Student PC from SCCM, and use it also for patching the Windows. there will be also Forefront on the machine.
Any Idea how to lock down part of the Computer?
/SaiTech
June 14th, 2010 2:21pm
Hi,
Since the students have enough permission to install programs, they will also have permission to uninstall program. To avoid uninstalling certain application by student,
you should put the machines in domain and make a logon scripts which make the student to install the application except the user already has it on the machine.
To make a logon script to install software, please refer to the following article:
http://support.microsoft.com/kb/816102
Thanks,
Novak
Free Windows Admin Tool Kit Click here and download it now
June 15th, 2010 8:23am
Is there no way to setup Forefront in such a way that a Password is required before uninstallation? Symantec AV and SEP had a similar option
You could repackage the application so that it is hidden from Add/Remove Programs, meaning it could be uninstalled from the Registry Uninstall string.
June 16th, 2010 11:28am