While debating pros and cons of giving users local admin right at the DC CITRT last week, I brought up slick setup that one of our volunteers had ported over from his day job.

David Mikhail, one of Fairfax County Public Schools’ top Windows engineers had put together a master list of software to blacklist via GPO.  This gives us the flexibility to allow users local admin right with some comfort that known bad software can’t be installed.

David has graciously provided an export (backup) of the GPO so that you can use it as well.  You should be able to restore the following into Group Policy:

Blacklisted Software – GPO Backup (zip)

HTML file for those of you who want a quick peek