question

AndreaVironda-1776 avatar image
0 Votes"
AndreaVironda-1776 asked DSPatrick commented

From Workgroup to Domain

Hi! I have a WS2019 set with several users on W10 machines.
I'd like to avoid them to install any software, but I think I need a domain in this case.
Can you confirm this to me or is there any way to avoid. The problem is that switching from a simple workgroup to a Domain must be a difficult task

windows-server
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Shouldn't have been by default. Another option may be via local group policy editor (gpedit.msc) Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Installer then set the policy Prohibit User Install to Enabled

--please don't forget to Accept as answer if the reply is helpful--





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick commented

Just checking if there's any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--




· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Now clients are sharing the same microsoft account and using a PIN to enter Windows.
Will I have to enter in another way? What's the relation between the Microsoft online account and Active Directory?

0 Votes 0 ·

Please close this thread by marking answer and open another thread for this new topic.

--please don't forget to Accept as answer if the reply is helpful--

0 Votes 0 ·
FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered AndreaVironda-1776 commented

Hi,

Administrator permissions are required to install software programs in Windows 10, so the quick way to prevent others from installing software on your computer is by using standard accounts.
Just make sure that the users are not in the administrators group.

If you want to use the group policy to prevent this. More details you can refer to the following link:
https://windowsreport.com/prevent-software-install-windows/

For machines in the workgroup, we need to setup the group policy settings on every machine.
For machines in the domain, we can deploy one GPO to manage all the machines.
Building Your First Domain Controller
Step by Step How to Add a Computer to a Domain

This response contains a third-party link. We provide this link for easy reference. Microsoft cannot guarantee the validity of any information and content in this link.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Now clients are sharing the same microsoft account and using a PIN to enter Windows.
Will I have to enter in another way? What's the relation between the Microsoft online account and Active Directory?

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered AndreaVironda-1776 commented

From Computer Management\Local User and Groups\Users here you can right-click the user Properties\Member Of tab and make them Users

--please don't forget to Accept as answer if the reply is helpful--




· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I notice this user is already under "Users" group
98887-image.png
But he's able to install programs


0 Votes 0 ·
image.png (14.4 KiB)
DSPatrick avatar image
0 Votes"
DSPatrick answered AndreaVironda-1776 commented

Just don't allow the users to be administrators on the desktops.

--please don't forget to Accept as answer if the reply is helpful--





· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Server or Client side?

0 Votes 0 ·

I assumed you were talking about the desktops but it would apply to either. Generally admins rights are required to install software.

--please don't forget to Accept as answer if the reply is helpful--


0 Votes 0 ·

I mean, where can I set user rights?

0 Votes 0 ·