Does anyone know how to stop users installing Spotify on Windows 7?

[adhutton]

We have discovered, this week, that Windows 7 users can install software such as Spotify and Chrome without any restriction on Windows 7 PCs.

 

We naturally have installation of .exe files restricted on the C:\ drive and in Home directories, but they can still install via a USB memory stick, as the install rights listed in group policy only work against software using windows installer.

 

When installing Spotify (on a Win 7 PC) it doesn't need any registry settings and installed to C:\users\user\appdata\local\spotify, it doesn't need to install in the C:\program files...

 

Has anyone encountered this problem/found a fix please?

 

Cheers_ Andrew

[Achandler]

Surely a user is restricted from installing software because they are not an administrator of the computer (or does Spotify not need admin rights either?)

 

If it doesn't then software restriction on e: drives etc would stop it.

[adhutton]

Surely a user is restricted from installing software because they are not an administrator of the computer (or does Spotify not need admin rights either?)

 

Apparently, they don't need Admin rights to install Spotify!!!

 

Andrew

[Achandler]

Then your best bet is default apply a software restriction to most common USB drive letter, so D:, E: etc to stop .exe files, it isn't pretty but it would work. If would also stop self contained exe files (I think Minecraft is a good example here)

[pete]

They're not installing it in the traditional sense, it's a glorified drag-and-drop.

 

Software restriction on local appdata?

GPP (file copying/checking/deleting) that looks for and deletes systemroot\users\user\appdata\local\spotify?

Prevent launching apps from local appdata, combined with the above?

[Davit2005]

Prevent launching apps from local appdata, combined with the above?

 

Hi Pete,

Would %userprofile%\appdata\ path do that?

 

Cheers, Dave

[adhutton]

They're not installing it in the traditional sense, it's a glorified drag-and-drop.

 

Software restriction on local appdata?

GPP (file copying/checking/deleting) that looks for and deletes systemroot\users\user\appdata\local\spotify?

Prevent launching apps from local appdata, combined with the above?

 

I have tried to delete the Spotify folder using GPP, but can't seem to get it to work.

 

Do you have that solution in place? If so, what options did you use in the GPP?

 

Cheers- Andrew

[old_n07]

Software restriction policy is the way forward

 

Stopping installation of Chrome, Dropbox, Spotify ?

 

Understanding Windows 7 AppLocker

Edited July 6, 2012 by old_n07

[enjay]

Hi Pete,

Would %userprofile%\appdata\ path do that?

 

Cheers, Dave

 

Did that path work without issue? I'd like to apply the same here if so.

[enjay]

Along similar lines, a user here got a Nasty on their computer which installed to and ran from C:\ProgramData - can I put an SRP on that folder, or would that affect other applications from running legitimately?

[AngryTechnician]

Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.

[enjay]

Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.

 

True enough, but there are other applications (legit and otherwise!) which also install in the same way.

[Guest M0MST]

Personally I use Sophos to block apps not required and look for the exe and refuse to run it, Nice report of who and where it is to pass onto teaching staff. Only trouble with blocking exe files from memory sticks is then blocking access to secure memory software, as well as auto run PowerPoint presentations. Oh course, filtering access to spotify works as well.

[enjay]

Personally I use Sophos to block apps not required and look for the exe and refuse to run it,

 

That requires you to know about the exe in order to block it, and sounds like a lot of fire-fighting. What you're proposing is an intruder alarm that only sounds if a known-burglar breaks in, rather than something which stops anyone who doesn't have a key.

[Renfield-64]

Spotify was a nice easy one for me - I blocked it on the firewall on the grounds that use in schools is expressly forbidden by the ToS. People stopped trying to install it once they realised it wouldn't work.

I can't find anything in the Spotify ToS that mentions schools?

[AngryTechnician]

It used to be in there, but this thread is nearly a year old and the wording of the terms has changed several times since then. However, it does still clearly say that "we grant you a limited, non-exclusive, revocable licence to make personal, non-commercial use of the Spotify Service". If you are in any doubt over whether use in school counts as personal use, the FAQ clearly states that is is not:

 

"Can I use Spotify to play music in my bar, restaurant, store, school etc?

No, the Terms & Conditions that you agree to when registering for Spotify state that Spotify is for personal, non-commercial use."

[Renfield-64]

It used to be in there, but this thread is nearly a year old and the wording of the terms has changed several times since then. However, it does still clearly say that "we grant you a limited, non-exclusive, revocable licence to make personal, non-commercial use of the Spotify Service". If you are in any doubt over whether use in school counts as personal use, the FAQ clearly states that is is not:

 

"Can I use Spotify to play music in my bar, restaurant, store, school etc?

No, the Terms & Conditions that you agree to when registering for Spotify state that Spotify is for personal, non-commercial use."

Many thanks, that will save me a lot of bother.

[Renfield-64]

It used to be in there, but this thread is nearly a year old and the wording of the terms has changed several times since then. However, it does still clearly say that "we grant you a limited, non-exclusive, revocable licence to make personal, non-commercial use of the Spotify Service". If you are in any doubt over whether use in school counts as personal use, the FAQ clearly states that is is not:

 

"Can I use Spotify to play music in my bar, restaurant, store, school etc?

No, the Terms & Conditions that you agree to when registering for Spotify state that Spotify is for personal, non-commercial use."

 

But this is still unclear. A school is not a commercial thing. Also, if you have a paid subscription could it then be used in school?

[AngryTechnician]

It may not be commercial use, but it's also not personal use.

 

If Spotify was installed on a teacher's own, personal property that they brought into school and used to play music only for themselves, on headphones, that would qualify as personal use. If it is installed on a computer owned by their employer (not their own property), it no longer counts as personal use.

 

The terms for paid subscriptions in this regard are no different from free use.

[Renfield-64]

OK thanks.