+ Post New Thread
Results 1 to 11 of 11
Windows 7 Thread, Blocking Firefox install in Technical; How can we easily prevent standard user accounts (a.k.a. Students!) from installing Firefox? They've found they can download the installer, ...
  1. #1

    Join Date
    Jan 2007
    Posts
    993
    Thank Post
    15
    Thanked 48 Times in 28 Posts
    Rep Power
    25

    Blocking Firefox install

    How can we easily prevent standard user accounts (a.k.a. Students!) from installing Firefox?

    They've found they can download the installer, install it then have access to Facebook etc!

  2. #2

    Join Date
    Apr 2008
    Posts
    853
    Thank Post
    111
    Thanked 112 Times in 108 Posts
    Rep Power
    46
    put something in gpp to look for firefox.exe or whatever its called? per user group not computer group

  3. #3

    Join Date
    Dec 2007
    Posts
    889
    Thank Post
    94
    Thanked 165 Times in 140 Posts
    Rep Power
    50
    Remember there is also the portable apps version of firefox (requiries no installation).

    If you have Sophos, you could enable application control and block firefox etc.

  4. #4

    Join Date
    May 2007
    Location
    London, UK
    Posts
    22
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Just wondered if anyone has an answer to preventing Firefox/Chrome installs as they do not require admin rights to install any more.
    I can block FF in Sophos (group policy is pretty useless) but I would llike a way to prevent them installing it in the first place.

  5. #5

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    11
    Remove administrator rights.

    Students and staff shouldnt really have the rights to install. Massive risk if you let them.

  6. #6

    Join Date
    Nov 2009
    Location
    Manchester
    Posts
    1,106
    Thank Post
    6
    Thanked 220 Times in 199 Posts
    Rep Power
    56
    How are they getting passed your proxy anyway?

    Surely a standard setup is you go through the proxy or you get no Internet Access? So they would have no reason to try and install Firefox anyway.

    Secondly group policy is not useless, block them running files except if they are in certain locations. Then they can't run the Firefox installer anyway.

  7. Thanks to Achandler from:

    tom_newton (18th July 2012)

  8. #7

    Join Date
    May 2007
    Location
    London, UK
    Posts
    22
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Firefox doesnt care if you are an admin or not - every user can install Firefox and Chrome. Try it - I have just tested it on XP and 7 and it installs to the local user folder under a basic user.
    Its more than about the proxy - its about setting up what I want in group policy to control IE - Home page, internet Zones etc...
    GP is great if you use Software restriction policies or App Locker but the "prevent programs from running" is useless as all you have to do is rename the file - Sorry I should have been more specific on the uselessness of GP.

    I have Application Control sorted through Sophos but I was just wondering if it is possible (through GP or not ) to stop users installing FF or Chrome - it's not a huge issue more of a surprise when I found that it just installed for anyone..

    Cheers!

  9. #8
    kernewek-sam's Avatar
    Join Date
    Sep 2010
    Location
    UK
    Posts
    264
    Thank Post
    67
    Thanked 50 Times in 46 Posts
    Rep Power
    68
    Block them from saving any files to their user area with the extension .exe and perhaps .msi, as long as they can't save locally.

    Edit: Block the download pages in your filtering/proxy. Re-read your last post, it is amusing it will install regardless, it sounds like you've found what GP can do on this issue, after I read this http://social.technet.microsoft.com/...3-6c225f883391
    Last edited by kernewek-sam; 18th July 2012 at 07:00 PM. Reason: add info

  10. #9
    old_n07's Avatar
    Join Date
    Jun 2012
    Location
    North Staffordshire
    Posts
    99
    Thank Post
    10
    Thanked 17 Times in 15 Posts
    Rep Power
    7
    You can block programs by file hash value as well as name so regardless of what they rename the file the hash value will be the same and will be blocked.

    The problem with using a hash is that each new version of the file will have a different hash value.

  11. #10

    Join Date
    May 2007
    Location
    London, UK
    Posts
    22
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I have no issues with being able to prevent FF from running - I've been using a combination of Software Restriction Policies and Sophos App Control for a while. Sophos is very handy as you don't have to keep up with hash values. App locker looks interesting but I have only just moved to Win 7...
    Blocking the main download page is fine but you can download FF from so many sites it seems a bit long winded and then there is Chrome..
    As I say I was just surprised it installed under Win 7 with no admin rights and I was sure there was some GP setting I had seen regarding preventing users from installing apps but it seems I am mistaken.

    Thanks for your input..

  12. #11


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,636
    Thank Post
    250
    Thanked 2,909 Times in 2,141 Posts
    Rep Power
    829
    In AppLocker you can block applications based on the publisher of the EXE.








SHARE:
+ Post New Thread

Similar Threads

  1. Firefox network install
    By SimpleSi in forum Windows
    Replies: 12
    Last Post: 21st November 2008, 12:36 PM
  2. Blocking firefox?
    By scottlee in forum Network and Classroom Management
    Replies: 5
    Last Post: 2nd February 2008, 10:31 PM
  3. Firefox MSI, AD install and ADM templates
    By ajbritton in forum Windows
    Replies: 6
    Last Post: 15th September 2006, 04:44 PM
  4. Anyone deployed Firefox?
    By eejit in forum Windows
    Replies: 34
    Last Post: 1st July 2005, 10:23 AM
  5. Firefox rocks!!
    By Dos_Box in forum General Chat
    Replies: 4
    Last Post: 24th June 2005, 10:04 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •