Stopping installation of Chrome, Dropbox, Spotify ? RRS feed

  • Question

  • Hi 

    Not really sure where to put this question but since we run SCCM I will try it here.

    We are having a bit of trouble with users that installs Google Chrome, Dropbox and Spotify application. The applications doesn't need administrative priviliges to install because they install in the users profile folder (Appdata\roaming or appdata\local).

    We can't seem to find a good way to stop this or uninstall the software. How are you guys dealing with this?


    Wednesday, November 23, 2011 5:39 PM


All replies

  • You can use either Software Restriction Policies or AppLocker (if you are on Windows 7 Enterprise).  These will prevent the user from launching the executables required for these programs.
    Rich Prescott | Infrastructure Architect, Windows Engineer and PowerShell blogger | MCITP, MCTS, MCP

    Engineering Efficiency
    Client System Administration tool
    AD User Creation tool
    • Marked as answer by Juke Chou Sunday, December 4, 2011 8:38 AM
    Wednesday, November 23, 2011 7:15 PM
  • I know this is pretty old but just in case this can help someone else, I recently wrote a detailed article on SCCM and Spotify and including on how to report with Power BI.

    It won't stop people installing the software, but you can fight back with an auto-uninstaller using SCCM. This should also work with all software but using Spotify as an example as that seems to hide from SCCM within the standard Software Inventory.

    The article is pretty big, so here is the link for the full detailed guide but the main points of it are this:

    1. Open the SCCM Console
    2. Go to Administration > Overview > Client Settings
    3. Edit Your Default Device Settings
    4. Go to Software Inventory
    5. Click Set Types button
    6. Click the yellow sun (new) icon
    7. Type in spotify.exe
    8. Configure the other settings how you want or leave as default
    9. Click OK and exit the Settings

    Once your SCCM has pulled in all the data into its database, you can query it in SQL with this:

         COMP.UserName0 AS [User],
         COMP.Manufacturer0 AS [Make],
         COMP.Model0 AS [Model],
         COMP.Name0 AS [Computer],
         SYS.SystemType0 AS [Architecture],
         SWI.ModifiedDate AS [Install Date],
         SWF.FileName AS [Filename],
         SWF.FileDescription AS [Product],
         SWF.FileVersion AS [Version]
         INNER JOIN SoftwareInventory SWI
              on SYS.ResourceID = SWI.ClientId
         INNER JOIN SoftwareFile SWF
              on SWF.ProductId = SWI.ProductId
    	  on SYS.ResourceID = COMP.ResourceID
         WHERE SWF.FileName = 'spotify.exe'

    You can then obviously go and use that query with Power BI.

    In my article I've detailed how to get the data, pull the data, setup a report in Power BI and how to automatically uninstall Spotify in SCCM.

    Hope it helps!

    Making IT Happen - https://blog.techygeekshome.info

    Tuesday, October 15, 2019 7:15 PM