Win7 system prohibits any specified software to run through the group policy installation

In the process of using win7 system, every time you go home, the computer is seized by the younger brother and sister, in order to prevent them from installing software on their own computers, how to prohibit Win7 system installation software? Let's take a look at how to operate with Xiaobian

Prohibit computer installation software through Group Policy

1. Press Win+R key and enter “Run” in operation. Gpedit.msc” After the carriage return, open the local Group Policy Editor. As shown in Figure 1
Figure 1 Open Group Policy

2, click to expand "Administrative Templates", click to open "windows components", click to select “windows installer”, Double-click “ disable ms installer". As shown in Figure 2
Figure 2 disable ms installer

3, in the "Disable Windows Installer", select "ldquo; has been used", click “ only for unmanaged applications & rdquo ;, select “Always disable ”, click “OK”. As shown in Figure 3
Figure 3 is always disabled

Second, through the special software to prohibit the installation program, win7 prohibits the installation of the software to limit the behavior of Win7 free software installation. At present, there are a lot of software on the market that prohibits the computer from installing programs at random, which can effectively prohibit the computer from randomly installing software and prohibiting the arbitrary operation of the program. For example, there is a "big trend to computer USB control software" (download address: http://www.grablan.com/monitorusb.html), there is a "forbidden to open the program" function, click on the "set" Program Prohibited List  Adding the program you want to disable and the name of the software that is prohibited from running can easily prohibit the installation and operation of the program. The operation is extremely simple. At the same time, you can also choose "Allow only open programs", and then add the programs you are allowed to run, then all other programs that are not allowed will not run. As shown below:

In addition, through the "big trend to shield USB port software", you can also effectively prohibit the use of USB storage devices such as USB flash drives and mobile hard disks to prevent mail, chat, and network disk. And FTP uploading and other means to disclose confidential information on the computer, as well as prohibiting free to open the website, only allow certain websites and other functions.