+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows 7 Thread, Does anyone know how to stop users installing Spotify on Windows 7? in Technical; We have discovered, this week, that Windows 7 users can install software such as Spotify and Chrome without any restriction ...
  1. #1
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    399
    Thank Post
    164
    Thanked 86 Times in 64 Posts
    Rep Power
    54

    Question Does anyone know how to stop users installing Spotify on Windows 7?

    We have discovered, this week, that Windows 7 users can install software such as Spotify and Chrome without any restriction on Windows 7 PCs.

    We naturally have installation of .exe files restricted on the C:\ drive and in Home directories, but they can still install via a USB memory stick, as the install rights listed in group policy only work against software using windows installer.

    When installing Spotify (on a Win 7 PC) it doesn't need any registry settings and installed to C:\users\user\appdata\local\spotify, it doesn't need to install in the C:\program files...

    Has anyone encountered this problem/found a fix please?

    Cheers_ Andrew

  2. #2

    Join Date
    Nov 2009
    Location
    Manchester
    Posts
    1,049
    Thank Post
    6
    Thanked 199 Times in 179 Posts
    Rep Power
    52
    Surely a user is restricted from installing software because they are not an administrator of the computer (or does Spotify not need admin rights either?)

    If it doesn't then software restriction on e: drives etc would stop it.

  3. Thanks to Achandler from:

    adhutton (6th July 2012)

  4. #3
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    399
    Thank Post
    164
    Thanked 86 Times in 64 Posts
    Rep Power
    54
    Quote Originally Posted by Achandler View Post
    Surely a user is restricted from installing software because they are not an administrator of the computer (or does Spotify not need admin rights either?)
    Apparently, they don't need Admin rights to install Spotify!!!

    Andrew

  5. #4

    Join Date
    Nov 2009
    Location
    Manchester
    Posts
    1,049
    Thank Post
    6
    Thanked 199 Times in 179 Posts
    Rep Power
    52
    Then your best bet is default apply a software restriction to most common USB drive letter, so D:, E: etc to stop .exe files, it isn't pretty but it would work. If would also stop self contained exe files (I think Minecraft is a good example here)

  6. Thanks to Achandler from:

    adhutton (6th July 2012)

  7. #5


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,630
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    They're not installing it in the traditional sense, it's a glorified drag-and-drop.

    Software restriction on local appdata?
    GPP (file copying/checking/deleting) that looks for and deletes systemroot\users\user\appdata\local\spotify?
    Prevent launching apps from local appdata, combined with the above?

  8. Thanks to pete from:

    adhutton (6th July 2012)

  9. #6

    Join Date
    May 2011
    Location
    Jus North of London, close but not too close
    Posts
    739
    Thank Post
    172
    Thanked 56 Times in 54 Posts
    Rep Power
    35
    Quote Originally Posted by pete View Post
    Prevent launching apps from local appdata, combined with the above?
    Hi Pete,
    Would %userprofile%\appdata\ path do that?

    Cheers, Dave

  10. Thanks to Davit2005 from:

    adhutton (6th July 2012)

  11. #7
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    399
    Thank Post
    164
    Thanked 86 Times in 64 Posts
    Rep Power
    54
    Quote Originally Posted by pete View Post
    They're not installing it in the traditional sense, it's a glorified drag-and-drop.

    Software restriction on local appdata?
    GPP (file copying/checking/deleting) that looks for and deletes systemroot\users\user\appdata\local\spotify?
    Prevent launching apps from local appdata, combined with the above?
    I have tried to delete the Spotify folder using GPP, but can't seem to get it to work.

    Do you have that solution in place? If so, what options did you use in the GPP?

    Cheers- Andrew

  12. #8
    old_n07's Avatar
    Join Date
    Jun 2012
    Location
    North Staffordshire
    Posts
    97
    Thank Post
    10
    Thanked 16 Times in 14 Posts
    Rep Power
    7
    Last edited by old_n07; 6th July 2012 at 11:38 AM.

  13. 2 Thanks to old_n07:

    adhutton (6th July 2012), Ergo (20th December 2012)

  14. #9
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,485
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    75
    Quote Originally Posted by Davit2005 View Post
    Hi Pete,
    Would %userprofile%\appdata\ path do that?

    Cheers, Dave
    Did that path work without issue? I'd like to apply the same here if so.

  15. #10
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,485
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    75
    Along similar lines, a user here got a Nasty on their computer which installed to and ran from C:\ProgramData - can I put an SRP on that folder, or would that affect other applications from running legitimately?

  16. #11

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.

  17. #12
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,485
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    75
    Quote Originally Posted by AngryTechnician View Post
    Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.
    True enough, but there are other applications (legit and otherwise!) which also install in the same way.

  18. #13
    M0MST
    Guest
    Personally I use Sophos to block apps not required and look for the exe and refuse to run it, Nice report of who and where it is to pass onto teaching staff. Only trouble with blocking exe files from memory sticks is then blocking access to secure memory software, as well as auto run PowerPoint presentations. Oh course, filtering access to spotify works as well.

  19. #14
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,485
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    75
    Quote Originally Posted by M0MST View Post
    Personally I use Sophos to block apps not required and look for the exe and refuse to run it,
    That requires you to know about the exe in order to block it, and sounds like a lot of fire-fighting. What you're proposing is an intruder alarm that only sounds if a known-burglar breaks in, rather than something which stops anyone who doesn't have a key.

  20. #15

    Join Date
    Apr 2013
    Location
    Poole
    Posts
    39
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by AngryTechnician View Post
    Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.
    I can't find anything in the Spotify ToS that mentions schools?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Help - Does anyone know how to track down changes in AD?
    By noah in forum Windows Server 2000/2003
    Replies: 2
    Last Post: 14th May 2012, 08:20 PM
  2. Replies: 0
    Last Post: 9th May 2012, 04:57 PM
  3. "How To" Guide for installing moodle on Windows 2003
    By darknova in forum Virtual Learning Platforms
    Replies: 6
    Last Post: 6th May 2008, 01:25 PM
  4. Replies: 8
    Last Post: 11th April 2006, 11:55 PM
  5. Does anyone know how to block chat on google
    By timbo343 in forum Windows
    Replies: 12
    Last Post: 21st March 2006, 11:38 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •