6.19 Software Installation Management Policy
The Software Installation Management Policy restricts employees from installing unrelated software and prevents the uninstallation of critical security applications, helping maintain proper software usage across company computers.
Before configuring the policy, administrators should categorize software installation packages and uninstallable software:
- Software installation packages: See Classification Management → Software Installation Packages.
- Uninstallable software: See Classification Management → Software Uninstall.
This policy applies at the computer level and does not support user-level policies.
| Icon |
Description |
 |
Modify software installation permissions on selected computers |
 |
Delete software installation permissions on selected computers |
 |
Export/import policy files or copy the current policy to other clients |
Policy Settings:
| Setting |
Description |
| Software Installation Control |
Enables control over software installations. |
| Enable Software Installation Control |
Must be checked for the installation control to take effect. |
| Block the Installation of the Following Software |
Select rules from the installation package library or input manually; matching software will be blocked. |
| Allow the Installation of the Following Software (Priority) |
Select rules from the library or input manually; matching software will be allowed. Allow rules take priority if software matches both allow and block rules. |
| Software Uninstallation Control |
Enables control over software uninstallation. |
| Enable Software Uninstallation Control |
Must be checked for uninstallation control to take effect. |
| Block the Uninstallation of the Following Software |
Select or input software to prevent uninstallation. |
| Allow the Uninstallation of the Following Software (Priority) |
Select or input software to allow uninstallation. Allow rules take priority if software matches both allow and block rules. |
Note:
- 1. Manual input matches software by name exactly. For example, if all installations are blocked but "VMware.exe" is allowed manually, renaming another installation package to "VMware.exe" would bypass the restriction. To prevent this, select packages from the library.
- 2. The policy can recognize software by company name. Use the prefix COMPANY: when specifying a company. The prefix is case-insensitive, but the colon must be English. Wildcards (*) are supported. Installation control checks the company name of the installation package. Uninstallation control checks the company name of the software.
Don't see what you're looking for?
