Q. If I'm using download and execute with System Center Configuration Manager (SCCM), is there a way to stop a local admin on a client from accessing the downloaded install files that are cached before installation?

A. When download and execute is used with SCCM, the installer files are downloaded to the local client and cached, then the installation proceeds. A local administrator could view this cache folder, because cached files aren't deleted until the space is needed. If you need to stop local administrators from accessing the SCCM cache, don't use download and execute. Instead, use the run from Distribution Point option. Hopefully, as companies roll out Windows 7, there will be far fewer of these local administrator protection questions Laughing .

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish