Home / server / Questions / 324702
In Process
Nathanael
Asked: 2011-10-26 09:40:09 +0800 CST

Is it possible to disable ClickOnce installers from running on machines?

  • 772

I need to prevent clickonce installers from being run from Internet explorer. For example, google chrome is installed through a clickonce installer.

Is this possible? If so what are the options to disable it? I'm only concerned with Windows 7.

windows-7 clickonce

1 Answers

  1. Use Applocker.

    We've implemented AppLocker with a baseline set of default rules that allow items to be run from program files, windows and some outside folders (like a custom folder for users to put portable apps). This removes the ability for clickonce junk to install as they most of the time launch from the profile.

    Not only does this assist keeping clickonce off our computers and out of user's profiles...but it basically stops drive by malware in its tracks.

    • 1