Thu 4 Nov 2010
Blacklisting Software using Group Policy
Posted by Andrew Mitry under CITRT, DC CITRT, Web/Tech
Comments Off
While debating pros and cons of giving users local admin right at the DC CITRT last week, I brought up slick setup that one of our volunteers had ported over from his day job.
David Mikhail, one of Fairfax County Public Schools’ top Windows engineers had put together a master list of software to blacklist via GPO. This gives us the flexibility to allow users local admin right with some comfort that known bad software can’t be installed.
David has graciously provided an export (backup) of the GPO so that you can use it as well. You should be able to restore the following into Group Policy:
Blacklisted Software – GPO Backup (zip)
HTML file for those of you who want a quick peek
It was decided to not do a 

