adhutton Posted July 6, 2012 Posted July 6, 2012 We have discovered, this week, that Windows 7 users can install software such as Spotify and Chrome without any restriction on Windows 7 PCs. We naturally have installation of .exe files restricted on the C:\ drive and in Home directories, but they can still install via a USB memory stick, as the install rights listed in group policy only work against software using windows installer. When installing Spotify (on a Win 7 PC) it doesn't need any registry settings and installed to C:\users\user\appdata\local\spotify, it doesn't need to install in the C:\program files... Has anyone encountered this problem/found a fix please? Cheers_ Andrew
Achandler Posted July 6, 2012 Posted July 6, 2012 Surely a user is restricted from installing software because they are not an administrator of the computer (or does Spotify not need admin rights either?) If it doesn't then software restriction on e: drives etc would stop it. 1
adhutton Posted July 6, 2012 Author Posted July 6, 2012 Surely a user is restricted from installing software because they are not an administrator of the computer (or does Spotify not need admin rights either?) Apparently, they don't need Admin rights to install Spotify!!! Andrew
Achandler Posted July 6, 2012 Posted July 6, 2012 Then your best bet is default apply a software restriction to most common USB drive letter, so D:, E: etc to stop .exe files, it isn't pretty but it would work. If would also stop self contained exe files (I think Minecraft is a good example here) 1
pete Posted July 6, 2012 Posted July 6, 2012 They're not installing it in the traditional sense, it's a glorified drag-and-drop. Software restriction on local appdata? GPP (file copying/checking/deleting) that looks for and deletes systemroot\users\user\appdata\local\spotify? Prevent launching apps from local appdata, combined with the above? 1
Davit2005 Posted July 6, 2012 Posted July 6, 2012 Prevent launching apps from local appdata, combined with the above? Hi Pete, Would %userprofile%\appdata\ path do that? Cheers, Dave 1
adhutton Posted July 6, 2012 Author Posted July 6, 2012 They're not installing it in the traditional sense, it's a glorified drag-and-drop. Software restriction on local appdata? GPP (file copying/checking/deleting) that looks for and deletes systemroot\users\user\appdata\local\spotify? Prevent launching apps from local appdata, combined with the above? I have tried to delete the Spotify folder using GPP, but can't seem to get it to work. Do you have that solution in place? If so, what options did you use in the GPP? Cheers- Andrew
old_n07 Posted July 6, 2012 Posted July 6, 2012 (edited) Software restriction policy is the way forward Stopping installation of Chrome, Dropbox, Spotify ? Understanding Windows 7 AppLocker Edited July 6, 2012 by old_n07 2
enjay Posted December 18, 2012 Posted December 18, 2012 Hi Pete, Would %userprofile%\appdata\ path do that? Cheers, Dave Did that path work without issue? I'd like to apply the same here if so.
enjay Posted December 18, 2012 Posted December 18, 2012 Along similar lines, a user here got a Nasty on their computer which installed to and ran from C:\ProgramData - can I put an SRP on that folder, or would that affect other applications from running legitimately?
AngryTechnician Posted December 18, 2012 Posted December 18, 2012 Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.
enjay Posted December 18, 2012 Posted December 18, 2012 Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work. True enough, but there are other applications (legit and otherwise!) which also install in the same way.
Guest M0MST Posted December 20, 2012 Posted December 20, 2012 Personally I use Sophos to block apps not required and look for the exe and refuse to run it, Nice report of who and where it is to pass onto teaching staff. Only trouble with blocking exe files from memory sticks is then blocking access to secure memory software, as well as auto run PowerPoint presentations. Oh course, filtering access to spotify works as well.
enjay Posted December 20, 2012 Posted December 20, 2012 Personally I use Sophos to block apps not required and look for the exe and refuse to run it, That requires you to know about the exe in order to block it, and sounds like a lot of fire-fighting. What you're proposing is an intruder alarm that only sounds if a known-burglar breaks in, rather than something which stops anyone who doesn't have a key.
Renfield-64 Posted October 8, 2013 Posted October 8, 2013 Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work. I can't find anything in the Spotify ToS that mentions schools?
AngryTechnician Posted October 8, 2013 Posted October 8, 2013 It used to be in there, but this thread is nearly a year old and the wording of the terms has changed several times since then. However, it does still clearly say that "we grant you a limited, non-exclusive, revocable licence to make personal, non-commercial use of the Spotify Service". If you are in any doubt over whether use in school counts as personal use, the FAQ clearly states that is is not: "Can I use Spotify to play music in my bar, restaurant, store, school etc? No, the Terms & Conditions that you agree to when registering for Spotify state that Spotify is for personal, non-commercial use."
Renfield-64 Posted October 8, 2013 Posted October 8, 2013 It used to be in there, but this thread is nearly a year old and the wording of the terms has changed several times since then. However, it does still clearly say that "we grant you a limited, non-exclusive, revocable licence to make personal, non-commercial use of the Spotify Service". If you are in any doubt over whether use in school counts as personal use, the FAQ clearly states that is is not: "Can I use Spotify to play music in my bar, restaurant, store, school etc? No, the Terms & Conditions that you agree to when registering for Spotify state that Spotify is for personal, non-commercial use." Many thanks, that will save me a lot of bother.
Renfield-64 Posted October 9, 2013 Posted October 9, 2013 It used to be in there, but this thread is nearly a year old and the wording of the terms has changed several times since then. However, it does still clearly say that "we grant you a limited, non-exclusive, revocable licence to make personal, non-commercial use of the Spotify Service". If you are in any doubt over whether use in school counts as personal use, the FAQ clearly states that is is not: "Can I use Spotify to play music in my bar, restaurant, store, school etc? No, the Terms & Conditions that you agree to when registering for Spotify state that Spotify is for personal, non-commercial use." But this is still unclear. A school is not a commercial thing. Also, if you have a paid subscription could it then be used in school?
AngryTechnician Posted October 9, 2013 Posted October 9, 2013 It may not be commercial use, but it's also not personal use. If Spotify was installed on a teacher's own, personal property that they brought into school and used to play music only for themselves, on headphones, that would qualify as personal use. If it is installed on a computer owned by their employer (not their own property), it no longer counts as personal use. The terms for paid subscriptions in this regard are no different from free use. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now