Harmony Endpoint Security - prevent user to install new application

[freeman91]

Hi,

is there a way to prevent user to install new application?

[G_W_Albrecht]

Yes - give the user no  admin rights and he will be unable to install anything. Most companies use MS GPO.

[freeman91]

Yes, I am aware of GPO.

Just was curious is this possible via Harmony Endpoint.

[G_W_Albrecht]

Look thru https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Default.htm

But why should Harmony Endpoint do what MS has done already ? It rather adds things MS GPO can not do...

[Chris_Atkinson]

Are you looking for Application Whitelisting or something more basic than that?

https://sc1.checkpoint.com/documents/infinity_portal/webadminguides/en/harmony-endpoint-admin-guide/...

[freeman91]

Yes, something like that. I don't want specific app to be used.

[G_W_Albrecht]

You could block Internet Access for the App, but not installation.

[PhoneBoy]

The ability to install/uninstall apps is a function of the operating system itself and not something Harmony Endpoint can influence.
If you want to prevent certain applications from being used, you should both restrict the application in App Control and/or create Firewall rules to block the relevant traffic used by that application.