Disable Windows installation software

Today the computer inexplicable installed Baidu Antivirus, want to permanently solve the problem.

1. Uninstall Baidu Antivirus

2. Run cmd--"SC delete ' service name '

3.sc Delete BDMINIDLUPDATE/BDSGRTP

C:\USERS\ADMINISTRATOR>SC Delete Bdminidlupdate
[SC] DeleteService success

method One, prohibit the installation of software through Group Policy. Run Gpeditmsc Open Group Policy, open Windows components in Administrative Templates, have a Windows installation service, take a look at the right thing, how to: Run gpeditmsc-> Computer Configuration, Administrative Templates, Windows Components->ms installer-> Start "Disable MS Installer" and "Prohibit user Installation"

In the right window of Windows Installer, double-click Disable Windows Installer check enabled, click OK.

Policy enabled: Disable Add/Remove Programs, and then enable the following policy: console-User Configuration-Administrative Templates-system "only run licensed Windows applications" in the "List of allowed applications" Adding a program that allows you to run applications that allow you to run restrictions and restrictions can be limited in Group Policy, but as long as the user can enter the Group Policy, then he can install the file, set the method to enter the Group Policy, go to the users permission settings to find the installation file entry Delete all user name.

method Two, disable the installation program through Windows Installer. on my Computer----right-click Management-----Open Services and services inside the application------find Windows Installer on the right-----double-click Open to change the startup type to disabled.

In this way, most installers will not be able to install, because he will prohibit all calls to the Windows Installer installation program, especially those *msi must not be installed.

method Three, through the Control Panel account permissions to control the computer installation software . Face Control Panel in the user account, set up an account, do not give the installation rights, I want to install the right button to choose to run this installation program, some of the programs to modify the system files also use this method to run.

Into the Administrator account:

gpedit.msc-Computer Configuration-windows Settings-security Settings-User Rights Assignment There is a load and unload program that permits trust to delegate.

method Four, set user rights to prohibit the computer installation program. to the administrator user name encryption, create a new user group users, let them log in with this account, the installation directory can not be used.

Enable multi-user logins, set permissions for each user, preferably with administrator privileges to install programs.

Also, if you are 2000, XP or 2003 system, convert the disk format to NTFS format, then set up the user, set the permissions on each user.

Reference from:

Http://jingyan.baidu.com/article/b24f6c82c838d986bfe5da01.html

Disable Windows installation software