Is it possible to block the installation of Yandex browser, Amigo, Mail and other bad things through the group policy of the domain network?

Question

Computer networks

Is it possible to block the installation of Yandex browser, Amigo, Mail and other bad things through the group policy of the domain network? All this is installed without administrator rights, so "user" can do what they want by installing these browsers. It is impossible to prohibit locally through AppLocker since most computers are on windows xp, and this is not really an option. How to disable the installation of such programs?

Answer 1

Maybe. It is enough to prevent users from running programs from any directories except C:\Windows, C:\Program Filesand C:\Program Files (x86).
For XP there is a Software Restriction Policy (SRP).

Answer 2

using the built-in ACL mechanism of the file system, prohibit users from creating files and folders anywhere except for the user's own folder, and prohibit the launch of files for execution in the user's folder.

Answer 3

I read the answers, but it seems to me the only option is to block the creation of folders and files with the appropriate names in user profiles and the corresponding registry branches. But they (names) can change over time - you need to monitor the relevance.

Answer 4

Not quite a blocking, but a utility for removing checkboxes of left applications when installing the necessary ones. Unchecky https://unchecky.com

Answer 5

applocker prohibits installation of programs from yandex mail publishers.
but I don't quite understand what the point is.

Answer 6

On the gateway, filter these files in transit. Prevent the user from putting programs in the home folder. Prevent launching outside of system folders. Do not run anything but allowed executable files.

Answer 7

It is possible on the maximum version of Windows using applocker. Here are the details: https://wintech.net.ru/index.php?newsid=861