question

PedroRibeiro-8092 avatar image
0 Votes"
PedroRibeiro-8092 asked GloriaGu-MSFT answered

How to control software in local VM

Hi all,

In our company we use SCCM to control all domain computers, and apply security policies and compliances.

Users also use VM (Hyper-V and Virtualbox) in their machines, that aren't domain joined. They need these local VMs to run some tests related with their work. But some users are using these local VMs to use software that isn't allowed by company.

There's any way to control the use and software installed in these virtual machines?

Thanks in advance.

windows-server-powershellwindows-server-hyper-v
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GarthJones-MVP avatar image
0 Votes"
GarthJones-MVP answered

As long as they are full administrators on the VM, there isn't a lot you can do.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

Are the VMs managed by ConfigMgr? If so, you can deploy an AppLocker policy (not directly but by using PowerShell delivered by ConfigMgr) or Application Control (ConfigMgr can directly deliver App Control policies) to prevent the execution of unwanted software.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PedroRibeiro-8092 avatar image
0 Votes"
PedroRibeiro-8092 answered Jason-MSFT commented

No, the VMs are not managed by SCCM.
I read that for Hyper-v I can use Powershell direct.
But I can't find a solution to virtualbox.
Any ideas?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Well, that's not a question that should be tagged for ConfigMgr then but rather Hyper-V or PowerShell -- I've added tags for those to this thread.

0 Votes 0 ·
GloriaGu-MSFT avatar image
0 Votes"
GloriaGu-MSFT answered

Hi,

Thank you for posting in Q&A!

Yes, I agree with MVP.
Since the users are administrator of their VM, it seems don't exist such method to achieve this.

Hope you have a nice day : )
Gloria
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
https://docs.microsoft.com/en-us/answers/articles/67444/email-notifications.html

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.