How to control software in local VM

Pedro Ribeiro 41 Reputation points
2020-12-10T11:21:56.86+00:00

Hi all,

In our company we use SCCM to control all domain computers, and apply security policies and compliances.

Users also use VM (Hyper-V and Virtualbox) in their machines, that aren't domain joined. They need these local VMs to run some tests related with their work. But some users are using these local VMs to use software that isn't allowed by company.

There's any way to control the use and software installed in these virtual machines?

Thanks in advance.

Hyper-V
Hyper-V
A Windows technology providing a hypervisor-based virtualization solution enabling customers to consolidate workloads onto a single server.
2,547 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,381 questions
0 comments

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jason Sandys 31,161 Reputation points Microsoft Employee
    2020-12-10T17:07:33.49+00:00

    Are the VMs managed by ConfigMgr? If so, you can deploy an AppLocker policy (not directly but by using PowerShell delivered by ConfigMgr) or Application Control (ConfigMgr can directly deliver App Control policies) to prevent the execution of unwanted software.

    0 comments
  2. Pedro Ribeiro 41 Reputation points
    2020-12-10T17:38:52.497+00:00

    No, the VMs are not managed by SCCM.
    I read that for Hyper-v I can use Powershell direct.
    But I can't find a solution to virtualbox.
    Any ideas?

  3. Gloria Gu 3,891 Reputation points
    2020-12-17T07:56:42.097+00:00

    Hi,

    Thank you for posting in Q&A!

    Yes, I agree with MVP.
    Since the users are administrator of their VM, it seems don't exist such method to achieve this.

    Hope you have a nice day : )
    Gloria

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
    https://learn.microsoft.com/en-us/answers/articles/67444/email-notifications.html

    0 comments