I have a user on a domain with local admin rights who wants to download and install Go To Assist on her workstation so that she can access it from home. Management wants to prevent this. The Server is Windows Server 2008 Standard and the workstation is WIndows 7. What is the best way to block the download or installation? The block can apply to all users as opposed to only one specific user.

I am not 100% sure but if you impement SRP ( software restriction policy ) this should prevent all users including local admins from installing and running unauthorized software. The only people that will be able to install software will be domain admins.

Hi, You could try to use software restriction policy and Applocker. How Do I: Software Restriction Policies in Windows 7 http://www.microsoft.com/events/podcasts/default.aspx?seriesID=Series-acd4d6bf-efe0-4f7e-a1f6-13eecb0b28d6.xml&pageId=x7089 AppLocker http://technet.microsoft.com/en-us/windows/dd320283 Also since the computer is in a domain environment, it is better to find more useful suggestion on Server Forum. Win Server Forum http://social.technet.microsoft.com/Forums/en-US/category/windowsserver Best Regards, NikiPlease remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.