Windows 10: How to block domain users from installing any apps

Hello Team,We have received a request from the client to ensure that no applications including .msi or .exe files can be installed on PCs unless the user has domain administrator credentials. This measure is intended to mitigate the risk of potential security breaches.So far, I have attempted the following approaches:AppLocker – Did not produce the desired results.Software Restriction Policies SRP – Partially effective, but still allows some installations.Despite these efforts, browsers like Chrome, Mozilla, Opera, and Brave can still be installed without domain admin credentials. In some

:)

 

UnattendedJoin error: failed to find the domain data (0x6e)

Thanks for the suggestion! I don't want to add a domain account, as this is a generic unattended install that will be used for all company machines. Do you think it's possible that the computer would join the domain if, instead of using UnattendedJoin in specialize, I used your steps but left out the specific account? The other thing I was thinking was to use a generic account to allow the domain join during the specialize step. I added a machine password in the UnattendedJoin component, and instead of getting the error listed above, I got an authentication error, which makes me think I could probably do a secure join instead of the unsecure join. Thoughts?

 

Windows Firewall blocks App Store from downloading new apps

Hi,

Let's try to check if the app store you're referring to if it's really blocked by Windows Firewall. See these steps:

• Open Windows Firewall from the taskbar >
  Firewall & network protection > Allow an app through firewall.
• A new window will show up containing the list of the apps that ca be allowed through Firewall.
• Look for the app you want to be accessed, and make sure that the Domain, Private and Public are ticked. That would allow the app store to be accessed.

Let us know what happens after doing the suggestion.